Automated verification of fault tolerance mechanisms