The principles of extreme fault tolerance