In a YANG model, which statement is used to define an operational constraint that must be true for the data to be valid?