Is it powering up and not going into maskrom mode immediately, even though the FORCE_RECOVERY pin is asserted? These might be RK1.0s, since the 1.2 (earliest version sold to the public) treats that signal as a hard "force maskrom mode"... Perhaps bmcd should look for devices coming up in the wrong mode and send the command to enter maskrom mode? 🤔