What system must implement the fail-silence in the value domain? What are the differences between the TTP/C protocol and the TTP/A protocol? What is the controller state (C-state) of a TTP/C controller? How is the agreement of the C-state enforced within an ensemble?