Verification of Object Relational Maps