I have bad and good news about T1, guys. (based on dumps kindly shared by porkupan) Good is that old method of flashing used by PRS+ installers for x50 still works. Sony's code is still not obfuscated. Now there is legit JNI interface to mix some native code in, instead of strange Kinoma's way that was never harnessed.
Bad is that Kinoma's engine seems completely abandoned. No more "write for one model and it works on a bunch of them". Digging android code will be quite a task, decompilers are nowhere at defsk2 level, which might turn patching into a very painful process. System
is not as solid as on older models, hung number of times for different users.