Provenance model