Implementing Fault-Tolerant Distributed Objects

objects that remain available, andwhoseoperations areguaranteed toprogress tocompletion, despite uptoksite failures. Theimplementation isderived fromtheobject specification automatically, anddoesnotrequire anyinformation beyondwhatwouldberequired foranonresilient nondistributed implementation. Itistherefore unnecessary foranapplications programmer tohaveknowledge ofthe complex protocols nonnally employed toimplement fault-tolerant objects. Ourtechnique isusedinISIS, asystem being developed atCornell tosupport resilient objects.