The Touch ID / Secure Enclave magic isn’t in that two-commit demo branch at all. All the code lives in a separate module (specter-enclave) that we keep in its own repo and pull in at build time. The README edits just point macOS users at the notarised DMG. Nothing is “only in the binary” ,  you can reproducibly rebuild the exact same DMG from source in about 15 minutes.