Verifying Transformation Model Properties with a UML and OCL Model Validator