& CHAPTER 2 Tolerating Arbitrary Failures With State Machine Replication