How to build reliable systems (with unreliable components)