So, progress... I changed the 10k pull-up resistors to 1k, and with the ROM plugged via an adaptor into the EEPROM socket, here's what I see:
Which is a lot better than yesterday.
However, it's running but not quite correctly: the display is multiplexing, the keyboard is being read (and stopping the multiplex until it's released, as expected) but (a) the initial display is incorrect: $F7F6 instead of $0200, and (b) no change when the keys are entered in the displayed memory address. Also, it doesn't reset _every_time; sometimes it locks up instead of running.
It's probably expected that the data doesn't change; the data is built a nibble at a time directly into the memory being addressed, and there's nothing there but the ROM (and the data at $FFF6 is in fact $77, which is what I see).
So my suspicion is either that it still isn't _quite_ fast enough (though it looks as if it should _just_ work at 1.8MHz) or that dropping it into the EEPROM socket has an effect I haven't considered. I can't (yet) fit it to the connector intended for it as I have now added a ~OE input to the rom which I haven't looked at Mesolithic to see what I can use.
But we're getting there. The joy of bootstrapping: which bit is not working?
Neil