arguments by reference
npe - different inspections for guaranteed null and not guaranteed
arrays, pointers
remove cloning for dependent vars
make analysis monotone (remove inversions of incrementalized relations)