That's all fine, but I think it would be more useful if/when showing a UI that allows users to pick their own relays. If the relays are already baked into the bunker/nostrconnect url, there's not much you can do if they don't check out.

I've been continuing to debug, and it seems like stricter approvals work better for me. They don't always go through, and there's some UI open/close spam, but I am able to get responses.

One other thing I've noticed is that if I remove permission but don't delete my key from the app, the bunker still responds with error: 'no permission', which gets in the way of my handler accepting a successful response from another signer. I'll have to handle that on my side anyhow, but I think bunkers probably "must not" respond if they don't have an active session.