In the interest of completeness I looked deeper and there are a few more patches to the kernel and SEP OS done at emulation time: https://github.com/ChefKissIn

In the interest of completeness I looked deeper and there are a few more patches to the kernel and SEP OS done at emulation time: https://github.com/ChefKissInc/QEMUAppleSilicon/blob/6eff3abbc902a360f61dd5ba2cd5d9edc065e23f/hw/arm/apple-silicon/t8030.c https://github.com/ChefKissInc/QEMUAppleSilicon/blob/6eff3ab... but really nothing too extensive or hard to port. It’s mostly flipping various can_has_debug returns, bypassing sigcheck, and the classic patch to flip launchd into research device mode.