I've tried to call the TTJ thingie on 60D, with that big list of parameters described above, no success.
As long as Canon code is creating the jpegs, I can record MJPEG fairly well (at low resolution, of course).
On 5D3 I've tried to inject some events in the LVCDEV machine. I can trigger the state transitions, but I'm not passing some memory suite correctly (I get ERR70 about that).