Compliance Quantified: A Theory of Verification