failure-tolerant design

故障容差设计