The Ravens of the Tower: Why N+1 Isn’t Enough and Spares Must Fail Separately
Legend says the kingdom falls if the ravens leave the Tower of London, so the Tower keeps six and a spare. That spare is the lesson: redundancy has to survive maintenance and a failure at the same time, and the spares have to fail independently.