PASS: 8 boot cases; both remap bits, prior GPIO zero/all-ones; physical pin16 low and pin17 input pulldown; mapping staged before switch. MMIO model only.
