Is the UART1 going to be available somehow? This is the primary debugging serial port for the unit, hard-coded into the SoC for alternate booting.
It would save time scoping the board if we knew where it was, and it's not technically a hack since we're not modding the board - just getting...