@whitequark I think (if I'm remembering the layout relative to the JTAG scan direction correctly) that this "design decision" falls out of wanting to be able to get at the DBGBREAK bit by itself at times (avoiding scanning in/out 32bits of extra overhead).