I worked with a few more orders of magnitude and saw lots of errors.
—which happened often enough. Tape stuck in a drive, operator has to go into the tape library to fish it out. You have to turn the robots off first. Individual tape errors were invisible because we used erasure codes. We would have to see, like, four correlated failures in order to lose data.
I did the math and we were comfortable with that level of redundancy, based on our data for how often tapes fail. When I say I did the math, I mean I personally did the math, but I don’t have the figures handy.