Overall, the philosophy is to attack the availability problem from two
complementary directions: to reduce the number of software errors through
rigorous testing of running systems, and to reduce the effect of the
remaining errors by providing for recovery from them. An interesting footnote
to this design is that now a system failure can usually be considered to be
the result of two program errors: the first, in the program that started the
problem; the second, in the recovery routine that could not protect the
system.  — A. L. Scherr, «Functional Structure of IBM Virtual Storage Operating
Systems, Part II: OS/VS-2 Concepts and Philosophies,» IBM Systems Journal,
Vol. 12, No. 4, 1973, pp. 382–400

0.21552155919­28970.09093025824­71980.85109505643­24380.17762233838­12480.79602603743­57690.37317289270­86660.07797268582­21146
15504.58553109194­4829.77174989979­1673.4885050842