Specifications (cont.)
n
private int
tally; //current count
n
//invariant:
n
//
tally >= 0
