Hi Quinn,
You are right that ssh-keychain.dylib is supposed to be the bridge. Can you please confirm if the shipping ssh-keychain.dylib can work with ECC keys as the CTK extension uses the EC keys from Secure Enclave ? This part is not clear from the man page.