[murderfs]

Then why only have one human bookkeeper? Surely two would be better, since you can compare their results. But then, perhaps you should hire three, so you can figure out which one is right.

[deno]

But what if the third bookkeeper is malicious? You need at least four bookkeepers to achieve byzantine fault tolerance with f=1.

[altruios]

does this assume a maximum of one malicious bookkeeper?

[deno]

Yes, you need 3f+1, so 4 for f=1, 7 for f=2.

https://lamport.azurewebsites.net/pubs/byz.pdf

[altruios]

Regardless of how correct they are, they assume liability: which is a metric that you do not improve with more bookkeepers.