Provenance graph for quantitative data-flow tracking