Elements of Style: Analyzing a Software Design Feature with a Counterexample Detector