# B9L-0 — lk1st chainloads an unmodified 32-bit lk2nd 23.1 (RAM only) — PASS (2026-10-03)

RESET-held power-on → lk1st fastboot (`product lk1st-msm8916`) → `fastboot boot b9/b9l/lk2nd-23.1-stock.img`
(= lk2nd-build/out/lk2nd.img 555826ea, FORCE_FASTBOOT). Nothing written.

UART (`l0/uart.log`):
- lk1st: `[1360] fastboot: boot` → `booting linux @ 0x80008000, ramdisk @ 0x82000000 (1), tags/device tree @ 0x81e00000`
- 2nd LK: `welcome to lk` → `lk2nd_init()` → `Booted @ 0x80008000, r0=0x0, r1=0x0, r2=0x81e00000` → `Found valid DTB with 1867 bytes total`
  → `Command line from previous bootloader: lk2nd androidboot.emmc=true …` → `No continuous splash: MDP GDSC is not enabled`
  → `Fastboot mode was forced with compile-time flag.` → `fastboot: processing commands`
- host: `fastboot getvar product` → `lk2nd-msm8916`, `kernel: lk`.

=> A second-stage 32-bit LK runs on the migrated chain (DB410c TZ + qhypstub). Basis for B9L-RAM.
(Driver note: the first identity probe after `boot` raced with lk1st still being enumerated; re-checked by hand.)