Fail-safe CPUs