Quirin, I don't you have a local version working using the isar-cip-core integration?
Chris, you could check if already the vanilla stub fails to run as EFI binary. It should at least print "Unified kernel stub (EFI Boot Guard v0.17)" and "Missing .kernel section" when there is no kernel linked to it. This is to rule out potential problems of the bg_gen_unified_kernel script. Jan