The kernel checks on boot that Darwin is running on an Intel Mac by asking the onboard Fritz ("Palladium") chip. The chip contains a key that the kernel checks for autenticity.

I haven't looked into this stuff at all, so I'm curious -- how do the hacks circumvent the startup check? I don't want the code, just curious on theoretical level how this is possible.