Relational characterizations of system fault tolerance