Implicitly starting a dataspace with top-level actions is a hole for the type system, which needs to know the type of possible assertions. Instead, provide `run-ground-dataspace` for kicking off the program.