Formal Verification of Data Provenance Records