The protocol response still requires a host-app delivery action.
The host app must open url to deliver the protocol response.
The host app must render html so its self-submitting form can deliver the protocol response.