Enforcing constraints in industrial control systems