It may come that the App never any reply to its request from the HAS.
There can be many reasons for this like users not starting their PKSA or not approving or refusing transaction requests they receive.
The APP should monitor requests' expiration against the
expiretimeout provided in the
sign_waitmessage. They should abort the transaction process and discard pending requests as well as any related reply they may receive.