Rewrite-based verification of XML updates