provenance investigation