fault-tolerant mechanism