Verifying incomplete and evolving specifications