That’s really helpful, thanks!
Now I just need to figure out the OpenOCD side. The vendor doesn’t seem to have an OpenOCD profile for this device that I can find, I’m chasing them, but do you happen to know if something like the AT91SAM9 debug config would work with other ARM926EJ-S cores? I’m assuming the JTAG interface should be identical, although the TAP ID may be different.