Several classes of failures

A. Fail-stop and crash errors
B. Routing errors
C.  Byzantine failures - machine still worked but produced invalid results
How to solve?
Global consensus about monitoring point
Atomic commitment
Validate messages in all levels