Part of the specification:
n
Since preconditions and postconditions
are part of the
specifications
, they
should not mention private
implementation components.
n
The reset method.
F
ensure:
F
tally == 0
(This is not correct!)
