I found the routines that do code signature checks on the pages + through dyld syscall.
I modified the code slightly so it will verify all code signature kernel checks as valid.
This means we can use stock dyld too...
I also noticed the panic.
It panics on map_text_segment_sys (that's where the trap gets called).
I modified the code slightly for the new syscall format (it shouldn't panic anymore).
I'll post the results soon, please test on that P4...