Interested in the progress made to this post -- although fearing it is long dead.

What happens when the recovery partition boots?
Could that allow to have wider access to the system?

AFAIK, there is available the SD card of NC 8.841 which should contain all requested materials.

To break U-Boot, have you tried with minicom?