Compositional verification