Answer
These are two genuinely separate substitution systems, not one syntax with two spellings — event parameters (the & syntax) are specific to that event's own message/subject/command text, while the # syntax refers to Context Substitution Variables (defined centrally under Solution Manager) intended for use in searches, lobbies, and similar UI contexts, not interchangeably inside PL/SQL event-action code.