This project documents a workaround that intentionally lowers Apple Silicon security policy to allow a boot arg.

The workaround requires:

bputil -a
csrutil enable --without nvram

That means:

• boot-arg restrictions are disabled,
• SIP NVRAM protections are disabled,
• AppleUserECM-debug=0x1 can be written to boot-args.

Do not apply this on a managed, production, shared, or high-risk machine unless you understand and accept the tradeoff.

To restore security, see docs/restore-security.md.

If you find a security issue in the scripts or docs, please open a GitHub issue with enough detail to reproduce the problem. Do not post private machine identifiers, serial numbers, or unredacted logs.