submitMulti in Daml Script is equivalent to a submission on the ledger API with the corresponding actAs & readAs fields. In your case, you’re missing the readAs claim for the public party. You should be able to create a token that supports this using damlhub-cli ledger multipartyToken