So it seems that it places some logs on your SD card that I've been analysing. It also seems to have its own custom directory for its save files in /uji on the SD card (config.sav and testlist.sav). Interestingly enough, I have some timestamps in each of the save files:
config.sav: Jul 17 2014 07:44:46
testlist.sav: Jul 17 2014 07:44:29
My internal clock is correct so I'm not sure what these correlate to. Perhaps a build date? I may also start a TCRF article on this. If someone can provide me a decrypted romfs I'd like to analyse it myself and see what I can mine from the ROM.