Compositional Verification Of Model-Level Refactorings Based On Graph Transformations