Currently, the host can request Vanadium to enter a (registered) V-App, and Vanadium does it immediately.
However, this is probably not desirable as the default behavior: the user should be informed that an app is about to be opened, and have a chance to confirm.
Since auto-opening is useful for certain apps, it should be added to the manifest. It might be a good chance to add a 'permissions' part of the Manifest, that could be used for this purpose, but also for other things.