HOW FAULT-TOLERANT QUANTUM SYSTEMS DEPEND ON ROBUST MISTAKE CORRECTION