Fault Tolerance in Tandem Computer Systems (1986)[pdf]