OK, so there is something funny going on. I programmed another EPROM with FF in address $00FFFC and $00FFFD, just to see if I could look it up.
I am not seeing that value at all.
In addition, the timing analysis shows that RD is being pulled low fairly regularly, in step with the clock cycle. I'm not sure why state analysis (SNES CLK) didn't show this. It could be I had something set up wrong, but it's pretty straightforward to take measurements and I am getting reasonable data (reset vector). I am not sure what is up with the irregular clock cycles. Maybe it is because I am not giving the SNES or my LA time to warm up. In any case, all the signals move on step with the clock, so it shouldn't' be an issue AFAIK.
Sorry I can't just post a .txt dump, my instrument only has printing capability. I sketched up some PCB for reading the print signal and found a library for converting to .txt or .pdf but I've been a dummy and haven't finished that before moving onto this project.