There is a discrepancy between how multiple action verbs are displayed when .ToString() is called on a SecPAL assertion, and how the formal model presents them. This is causing me to lose sleep.