How difficult is one session, how much forward you should be able to go?
It seems that you didn't say witch chip is the hot one.
I've thought it's ExReg01 or 03.
Is it warm or hot?
You can concentrate to that also.
Problem is that you need to trig its selections and then i/o is what it is and you can't say if those pins can flip their levels or not.
If your analyzer can trig using combinations you can also use NIR leds and 23, three ones are enough.
There next wires should go so that one register selections pins are added to the combination and test is done.
If trigger happens you know that this register testing has started.
For next round you change those selection pins and continue until all selections are tried.
Then you know those registers that are not involved.
Maybe that is doable with _HALTFF also.
Quite complicated anyway.
With _HALTFF method you connect
U/LMEMACK
_BUSDCK and BUSDSEL
_NIRCK and NIRSEL
and BIC SEL 0/1 and _BICGO
and then trigger as _HALTFF.
Then do test 23.
It doesn't matter how many other tests are done, only _HALTFF matters.
Then finally with some luck you can say something about how the test stopped.
Maybe after all the easiest thing there is a single module test.
There you take all but BIC board out, maybe leaving front panel connected, it's not so different than it may feel first, backplane is giving power and all other things are missing, nothing is electrically wrong.
Then you just start pulsing some pins and things start coming out.
You need 'store' and 'bbus' controls and few others.
Floating should be high so you flip everything low.
Writing
MEMA
P1-22 _IOAD and
P1-19 _MARST down gives you ADDST and enables MEMA.
P1-15 CPUCLK flipping will write MEMA, flip it few times.
U/LMEMACK are also clock pulses but timing is as it is with normal operation so it should work.
NIR
P1-4 _BIRC and
P1-20 _NIR down enables NIR.
P1-15 CPUCLK flipping will write it, flip it few times.
There seems to be a led also.
BUSD
P1-21 DATST is floating up, so enables BUSD.
P1-6 _RDRQST and
P1-2 _RSET and
P1-3 _MCRS down gives you READRQ and enables BUSD
P1-15 CPUCLK flipping will write it, flip it few times.
This has a bit more logic, maybe I missed something.
You can check them
J3-13 UMEMACK
J3-7 LMEMACK
J3-2 NIRSEL and led
J3-43 _NIRCK
J3-4 BUSDSEL
J3-45 _BUSDCK
Reading is same for all
P1-10 _BNIR and
P1-11 _BBUSD and
P1-13 _BMEMA gives you BIC SEL 0/1, all up is flip flops.
P1-12 LDEX is floating up, so enables _BICGO.
P1-15 CPUCLK flipping does _BICGO and enables LS253 outputs and so read what is selected.
Data is in the CPUBus, if you write 0s CPUCLK flipping read should flip the bit down and high impedance.
Don't forget to release them bits after writing.
BTW, it's 25 below here and how awful lot it is after few warm winters.