Yep, now I see the console I/O routine entry points listed for the ROM, but
can't see any doc on how you talk to them.

The following might be of some interest wrt the boot stuff:
0x20040004 - sys_type register == 0x4 (indicates a ka410)
0x200b0038 - console mailbox
	bits 9,8 - halt switch --> 0,1 restart, boot, halt
				   2 boot, halt
				   3 halt
	(CORRECTION ABOVE BITS ARE 7,6 not 9,8!!)
	bit 5 restart in progress
	bit 4 bootstrap in progress
	bits 3,2 halt action (bit definitions same as halt switch)
0x200b003c - console flags
	bit 9 - parameter file loaded for ethernet boot
	bit 8 - lk201 keyboard
	bit 7 - video display console\
	bit 6 - corrupted data (??)
	bit 5 - reentry flag
	bit 4 - multinational flag
	bit 3 - console display is a crt device
	bit 2 - guard
0x200b0040 - lk201 id
	bits 9-2 value indicates type of lk201
0x200b0044 - console id
	bits indicate console type
		0 - unknown
		1 - terminal on serial port 3
		2 - terminal on serial port 0
		b0 - monochrome bitmapped display
0x200b0098-0x200b00a4 - boot device (4 bytes in ascii)
0x200b00a8-0x200b00b4 - boot flags as set by "test 52"

Basically, this is all junk stuffed in the last bytes of tod watch chip's
nov ram. Just thought some of it might be useful, rick.