MODELING IMPERFECT COVERAGE IN FAULT-TOLERANT SYSTEMS