I would definitely wonder how exactly you'd check for that using the regular Aegis tools, as with the neutered Aegis ("Yes, we passed all checks, sire!") kernel, it does what it says on the lid - not return an -EPERM.

Perhaps check uname for the build date? IIRC there is no versioning method published for these kernels, especially that they're not flashable on-device like the N900.

I suggest that new aftermarket kernels leave a sysfs entry (/sys/kernel/security/validator/neutered, perhaps?) to let developers know which kind of device they're working with. Especially when it's an unknown ratio of Inception:Openmode users.