System Model
Set of nodes, each holding a copy of the database
Servers can crash/recover; network can partition/remerge
Servers communicate only through message exchange.
Messages can be lost; no message corruption or Byzantine faults
Database: one copy serializability