input/state constraints