[backend] fix sandbox constraints handling