Understand the request before approval.
The intended transaction view includes the network, recipient, asset, amount and fees. Review these details before approving anything through desktop.
A session is not a transaction signature.
Signing in provides scoped web access. Sending assets or changing permissions requires the corresponding approval; returning from desktop does not silently authorize a transfer.
Track the network result.
An approval and a confirmed on-chain transaction are different events. The production integration must report the submitted transaction and its actual network status.