I just got my hands on "XPC" which claims to be a newer, smarter way to boot os x, and a step closer to efi.
Test machine was my asus asus p5gc-mx/1333 running its internal gma950
The setup is straightforward once you have the files, an empty usb stick & a machine running windows. Running "makeusb d:" and dropping the boot rom file onto the root was all that was needed.
The bootloader is clearly based on duet:
Click to view attachment
The device paths seem somewhat locked, whether they are hardcoded or for some other reason..
Click to view attachment
It appears to be able to read HFS+
Click to view attachment
At boot it clearly loads some patches, whether these are universal, selected, or generated IDK
Click to view attachment
Inserting the retail DVD (I used 10.5.6) & hitting "enter" (which is pretty much all you can do with this thing) boots the retail DVD, quite neatly & smoothly, in verbose mode. Clearly the stick contains at least the decryption keys, if not the decryptor itself.
System Profiler shows Mac Pro:
Click to view attachment
Extensions pane:
Click to view attachment
this seems an interesting, if secretive initiative, and I'd love to know exactly how it works & what it can develop into.
