diff --git a/BoardConfig.mk b/BoardConfig.mk
index a857502..9ec5dba 100644
--- a/BoardConfig.mk
+++ b/BoardConfig.mk
@@ -36,6 +36,14 @@ BOARD_CUSTOM_BOOTIMG_MK := $(DEVICE_PATH)/mkbootimg.mk
 BOARD_KERNEL_IMAGE_NAME := Image
 BOARD_KERNEL_CMDLINE := console=ttyS2,1500000 no_console_suspend root=/dev/ram0 rootwait androidboot.hardware=tart
 
+# Bring-up debugging: expose an interactive shell on the ttyS2 serial console.
+# The kernel already logs to ttyS2, but without androidboot.console set,
+# ro.boot.console is empty and init's `console` service never binds a shell to
+# it. This is the only introspection path on this device (no working
+# WiFi/Ethernet, USB-C is power-in so no USB adb). Inert on `user` builds (the
+# console service is gated on ro.debuggable=1); remove before any release build.
+BOARD_KERNEL_CMDLINE += androidboot.console=ttyS2
+
 # Source kernel build (overrides the deprecated prebuilt kernel)
 TARGET_KERNEL_SOURCE := kernel/rockchip/tart
 TARGET_KERNEL_CONFIG := tart_defconfig