Classical stabilizing systems do not take into consideration safety issues. This paper examines two different safety models
for stabilizing distributed systems, and studies the cost of enforcing safety requirements in the context of various kinds
of failures.
This research was supported in part by the National Science Foundation under grant CCR-9901391.