This project is really cool its a shame you have to disable or partial disable SIP which can break some things.

Yeah real shame that I know I could never run this on a corporate machine and only ever as a hobbyist.

Have corporate buy you a research Air that isn’t on the MDM.

If corporate wants they can still accept/trust a machine with partially disabled SIP on the MDM

That means you're working for the wrong companies ;-)