[Fire Android Development] Rortiz2:
I have been looking and I have found the following:

���[LK] boot mode is DOWNLOAD_BOOT
���� DA verification disabled...
��� => Downloading...
�[PROFILE] ------- battery init takes %d ms --------
���[PROFILE] ------- show logo takes %d ms --------
��[PROFILE] ------- sw_env takes %d ms --------
�[PROFILE] ------- platform_init takes %d ms --------
��platform_init���ttyMT���platform/mt8127/uart.c��HS��ST/FT���[I2C-LK] set sclk to %ldkhz
���[I2C-LK] %d: the speed is too fast for this mode.
�[I2C-LK] %d: %s mode: unsupported speed (%ldkhz)
���[I2C-LK] set sclk to %ldkhz(orig:%ldkhz), sample=%d,step=%d
���[I2C-LK] %d: I2C structure:
[I2C-LK] Id=%d,Mode=%x,St_rs=%x,Dma_en=%x,Op=%x,Poll_en=%x,Irq_stat=%x
[I2C-LK] Trans_len=%x,Trans_num=%x,Trans_auxlen=%x,Data_size=%x,speed=%d
����[I2C-LK] %d: base address 0x%x
�[I2C-LK] %d: I2C register:
[I2C-LK] SLAVE_ADDR=%x,INTR_MASK=%x,INTR_STAT=%x,CONTROL=%x,TRANSFER_LEN=%x
[I2C-LK] TRANSAC_LEN=%x,DELAY_LEN=%x,TIMING=%x,START=%x,FIFO_STAT=%x
[I2C-LK] IO_CONFIG=%x,HS=%x,DEBUGSTAT=%x,EXT_CONF=%x
���[I2C-LK] addr %.2x dma %.2X byte
���[I2C-LK] DMA Register:INT_FLAG:0x%x,CON:0x%x,TX_MEM_ADDR:0x%x, RX_MEM_ADDR:0x%x,TX_LEN:0x%x,RX_LEN:0x%x,EN:0x%x
���[I2C-LK] %d: non-WRRD transfer length is not right. trans_len=%x, tans_num=%x, trans_auxlen=%x
����[I2C-LK] %d: WRRD transfer length is not right. trans_len=%x, tans_num=%x, trans_auxlen=%x
����[I2C-LK] %d: DMA non-WRRD transfer length is not right. trans_len=%x, tans_num=%x, trans_auxlen=%x
����[I2C-LK] DMA non-WRRD mode!trans_len=%x, tans_num=%x, trans_auxlen=%x
��[I2C-LK] %d: DMA WRRD transfer length is not right. trans_len=%x, tans_num=%x, trans_auxlen=%x
����[I2C-LK] DMA WRRD mode!trans_len=%x, tans_num=%x, trans_auxlen=%x
��[I2C-LK] DMA Transfer mode!
����[I2C-LK] %d: I2C%d doesnot support DMA mode!
��[I2C-LK] %d: DMA mode should use physical buffer address!
�[I2C-LK] %d: _i2c_get_transfer_len fail,return_value=%d
����[I2C-LK] %d: i2c_set_speed fail,return_value=%d
����[I2C-LK] Before start .....
����[I2C-LK] addr %x read byte = 0x%x
��[I2C-LK] %d: I2C_HS_NACKERR
����[I2C-LK] %d: I2C_ACKERR
����[I2C-LK] After i2c transfer .....
��[I2C-LK] %d: id=%d,addr: %x, transfer error
����[I2C-LK] %d: id=%d,addr: %x, transfer timeout
��[I2C-LK] %d: addr is invalid.
�[I2C-LK] %d: data buffer is NULL.
�[I2C-LK] %d: invalid para: i2c->id=%d
��[I2C-LK] %s
����[I2C-LK] %d: _i2c_check_para fail
�[I2C-LK] %d: read %d bytes fails,ret=%d.
���[I2C-LK] %d: Write %d bytes fails,ret=%d.
��[I2C-LK] %d: write_read 0x%x bytes fails,ret=%d.
���[I2C-LK] test i2c write
����[I2C-LK] %d: Write 2 bytes fails(%x).
��[I2C-LK] Write 2 bytes pass,these bytes are %x, %x.
����[I2C-LK] test i2c read
�[I2C-LK] test delay
����[I2C-LK] %d: read 2 bytes fails(%x).
���[I2C-LK] read 2 bytes pass,read_byte=%x,write_byte= %x.
����[I2C-LK] test i2c write_read
���[I2C-LK] %d: Write 1 byte fails(ret=%x).
���[I2C-LK] Read 1 byte pass ,this byte is %x.
����[I2C-LK] I2C%d,EEPROM test ret = %x
����i2c_read����i2c_write���[FASTBOOT] reboot to boot loader
��� < Kernel Power Off Charging Detection Ok>
����< Kernel Enter Normal Boot >
��[%s] %s partition read error. LINE: %d

That means that there is a way similar to fastboot but it is called download_mode.

Does anyone know how we could start in download mode?

I think it was mentioned by this thread but is there any way to get into it?

And [MENTION=8165603]DragonFire1024[/MENTION] do not play much with the lk2 because the preloader also verifies it with which if you modify it the fire will not power on, but can you publish it please?

�[%s] Verifying LK...
�[%s] fail to verify Second Bootloader.
�[%s] This is an Engineering device.

I also found this

[ANTI-ROLLBACK] Invalid anti-rollback state, skipping

This means that if we can put the anti rollback state in invalid, we could make a downgrade without brick the tablet?