For many systems, the rule is simply "X of Y servers must be up". Something like that isn't too hard to enforce.