provenance data model