rules constrain actions