Well, right now it's mostly really big assumptions that at least Hykem has code execution at boot0 to be able to see what's in the
boot1 OTP bank, as well as maybe others like smea, we're just playing a big game of replicating work while everyone learns about the system :\ if such a thing exists then obvs we wanna know what it is since boot0 can't be rewritten since it's on-dye and it's basically unpatchable, only boot1 and later can be updated via system updates. We haven't exactly had much contact with him for confirmation :\