How do you design for fault tolerance in a distributed environment where nodes frequently fail at Eventual?