The App Store build is sandboxed, so it cannot run an event tap of its own to notice ⌘⌘ while it is not running. TrackDrum can: reading combined-session key state needs no tap and no permission prompt, so promote the shield's exit watchdog into a watchdog that runs for the whole process lifetime. Outside capture, ⌘⌘ summons — activating Menu Band if it is running, otherwise launching it with --focus-on-launch so the gesture lands popover-open and focus-armed rather than merely started. During capture the same gesture keeps its old meaning and tears the shield down; Escape stays exit-only. The summon crosses the localhost bridge as a contactless "summon" frame, and a pending summon is held until the connection is ready so the first tap is never the one that gets dropped.