Circling back — the missing profile entitlement doesn't actually block ShazamKit at runtime. I removed com.apple.developer.shazamkit from my entitlements file entirely, built signed against the team wildcard profile (baseline four entitlements only), and SHManagedSession().result() against the default catalog matched cleanly on device. The backend bug is real but not blocking — worth trying before burning more time on the signing path.