Nice teardown. I have one too. It was totally dead but I botch wired it back to life. Sadly its password locked and I dont have the replication port to perfom a reset, I think the usual parallel port dongle should work.
It's a shame to have one of these rare machines locked out due to a password. I checked my ss1000 again my other docks and they're all either flipped or don't line up. I could offset it to plug into the ct20 dock, but I suspect the pinout is probably different. I actually made one of those parallel dongles to unlock a tecra 550cdt. It looks like the last dock I saw up for sale was a year ago, it's the pa2725uj. If you ever end up a complete dead end email me via about and maybe can work something out