Consistency of sandboxed functions