书籍 — fault-tolerant architecture