Predictable, Efficient System-level Fault Tolerance in C^3 Conference Paper uri icon