From requirements to partial behavior models: an iterative approach to incremental specification refinement