Verification of data-aware workflows via reachability: formalisation and experiments