1 – So subframe input polling is possible technically, thanks! Will check the released titles and see if I find multiple polling.
My first idea would be simply putting a breakpoint on reads to 0x02000028 and check Bit 1 (Read) Hardware Input in Progress how many times changes in a single frame.
2 – Good, so no plastic piece lock.
The linked thread mentions:
“insert a cart with battery backed SRAM while the system is on, the system resets.”
Other note I see on VB Development Wiki:
“In commercial cartridges, /RESET (pin 7) is connected to the SRAM CS2 and MM1245 reset IC. This is done in order to protect the SRAM from spurious writes during power-failure and during startup when VCC is unreliable/unstable.”
Does this affects other (released, commerical) cartridges too?