Simple testing can prevent most critical failures

distributed systems papers