Failure Model

Two assumptions:

• Only processor failures: permanent or temporary



• Fail-silent assumption: the processor stops executing