Aaaand I’ve discovered that the reason (or one of them) it doesn’t boot is the stack is either corrupt or isn’t being written to, so it does an LBSR call and can’t return because the stack contains 0xFFFF instead of 0xF18A. So it could be that nothing is asserting /WR for the RAM.