The first big hurdle is that the Aegis platform security completely blocks all attempts to chroot into my mounted image. We have found a hackish workaround (thanks to javispedro) that will disable the security until a reboot, but the long-term solution will have to be a new open kernel.

But my biggest problem right now is that I am infatuated with my HP TouchPad and WebOS, so I'm spending a lot of time there...