Add DS verification rules

See #4