> And release it after an "invocation" returns, or if the host requests it explicitly.

This would only work when being called from Lua, but not when the host calls into Lua (on the top level).