fault-tolerant heap