Describir: Proving Data-Poisoning Robustness in Decision Trees.