I used IDA Pro and disassembled the 2.2 iBSS. The diagnostic tool (or whatever this is) ranges from the addresses ROM:22012864 to ROM:22015C80, can you explain what this is?
iBSS is one of the members of the iBoot family. While iBoot is bigger and can do more things, iBSS is still needed (temporarily) in certain scenarios. The range you’ve pointed out in iBSS contains the menu structure used by the main command task’s interactive prompt. If you saw the video demo, that’s the prompt that RecoveryTool was interacting with. (Notice though, that iBSS doesn’t contain the “fsboot” command used in the video..that’s because that’s one of the functions left to the larger iBoot boot-monitor). (By the way, it’s great to see more people pulling this stuff apart!