Can anyone explain a bit more context around where this would fit in a running system? Would it handle cryptographic operations like key generation, signing etc? How does the boot loader compare to other projects like libreboot?

All of the sys calls in the GitHub repo just set flags in something called magic_mem and then call hitf_syscall, for which I can't find a definition.