Partial Model Checking