decide on recovery

Which level of resilience will we support? What about server outages of server A?