Reasoning about actors that share state