So without sandbox: it doesn't apply. Without explicit tool approval step: it doesn't apply. Response in xml: it doesn't apply.
What is the point?