An alternative order for the failures model - Roscoe, A (Oxford University Computing Laboratory, 1988)