Avoid Redundancy: While not every form of redundancy is as bad from a verification perspective as it is from a maintenance point of view, behavioral redundancy to re-create (local) state can impose problems because the model checker does not distinguish between function local and object state. For example:
We can change the above example by factoring out the declaration of x and turning it into object state.
