Any clue what radio IC they used? I didn't see the hardware mentioned in those links. Can you tune a vanilla LTE baseboard to unlicensed bands? Or did they use a software-defined transmitter with a custom LTE stack?
So they may be reusing some PHY parts like the OFDM but the rest seems custom.