anchor.diff:  
   command(S) ->
       oneof([
  -           %{call, ?MODULE, ring_update, [g_ring_nodes()]},
  -           %{call, ?MODULE, local_service_up, [g_service()]},
  -           %{call, ?MODULE, local_service_down, [g_service()]},
  -           %{call, ?MODULE, local_service_kill, [g_service(), S]},
  -           %{call, ?MODULE, local_node_up, []},
  -           %{call, ?MODULE, local_node_down, []},
  -           %{call, ?MODULE, remote_service_up, [g_node(), g_services()]},
  -           %{call, ?MODULE, remote_service_down, [g_node()]},
  -           %{call, ?MODULE, remote_service_down_disterl, [g_node()]},
  -           %{call, ?MODULE, wait_for_bcast, []},
  -           %{call, ?MODULE, healthy_service, [g_service()]},
  -           {call, ?MODULE, unhealthy_service, [g_service()]}%,
  -           %{call, ?MODULE, recovering_service, [g_service()]},
  -           %{call, ?MODULE, faulty_health_check_callback_once, [g_service()]},
  -           %{call, ?MODULE, faulty_health_check_callback_many, [g_service()]}
  +           {call, ?MODULE, ring_update, [g_ring_nodes()]},
  +           {call, ?MODULE, local_service_up, [g_service()]},
  +           {call, ?MODULE, local_service_down, [g_service()]},
  +           {call, ?MODULE, local_service_kill, [g_service(), S]},
  +           {call, ?MODULE, local_node_up, []},
  +           {call, ?MODULE, local_node_down, []},
  +           {call, ?MODULE, remote_service_up, [g_node(), g_services()]},
  +           {call, ?MODULE, remote_service_down, [g_node()]},
  +           {call, ?MODULE, remote_service_down_disterl, [g_node()]},
  +           {call, ?MODULE, wait_for_bcast, []},
  +           {call, ?MODULE, healthy_service, [g_service()]},
  +           {call, ?MODULE, unhealthy_service, [g_service()]},
  +           {call, ?MODULE, recovering_service, [g_service()]},
  +           {call, ?MODULE, faulty_health_check_callback_once, [g_service()]},
  +           {call, ?MODULE, faulty_health_check_callback_many, [g_service()]}
             ]).
   
   precondition(S, {call, _, local_service_kill, [Service, S]}) ->
  
positive.code: 
  validate_broadcasts(States, Op) ->
      Bcasts = broadcasts(),
      ?debugFmt("broadcasts:  ~p", [Bcasts]),
      ?assertEqual(length(Bcasts) + 1,  length(States)),
      validate_broadcasts(States, Op, Bcasts).
  
  
negative.code:     S2#state { service_pids = Pids };
  
  next_state(S, Res, {call, M, unhealthy_service, [Service]}) ->
      S;
  
  next_state(S, Res, {call, M, recovering_service, [Service]}) ->
      meck:sequence(mod_health, callback, 2, [false, true]),
  