Fault Tolerance as Built-In Primitive