key
data
create
destroy
is_empty
is_full
insert
Alternatively, we could drop the precondition and modify the postconditions as follows: if T contains a component C2 with the same key as C, then T' is like T but with C2 removed and C added. In other words, C replaces C2.
delete
retrieve