Partial UART console capture (power-on -> login prompt). Boot log source: smash.log line 428 + uart listener proc_f35241dee1c3 (exit 0, 10-min window). U-Boot: NON-interruptible (autoboot fires ~2s; key sweeps + 5s CR burst never yield `=>`). Kernel 3.10.108 (Allwinner BSP) boots. Effective bootargs (line 428): console=ttyS0,115200 rdinit=/sbin/init root=/dev/mtdblock2 ro rootfstype=squashfs clk_ignore_unused loglevel=7 mem=34M reserved-memory=30M@0x12200000 coherent_pool=256K ethon=n MTD: 0x000000-0x030000 comboot; 0x030000-0x140000 kernel; 0x140000-0x220000 rootfs (squashfs, RO /dev/mtdblock2); 0x220000-0x7e0000 app; 0x7e0000-0x800000 config (U-Boot env). Console then reaches `ni login:` prompt; no `=>` prompt, no known login. Auth is real (default + empty-root brutes rejected: "Login incorrect"). Note: this is a partial log captured during a brute-force/UART-intercept pass, not a clean full power-on dump. No Wi-Fi keys / cloud IDs are visible in the retained lines.