Comment 2 for bug 1814592

First of all that code is in snapd actually and gets incorporated in the behavior of the assertion service.

But is working as intend ed, *-attributes constraints as anything else consider a list as set of alternatives (OR),

single values are regexps so you will need quoting here, in which case if the actual value is a list all values in it must match the regexp.