Register 0x402000 is used by nv40 to acknowledge DMA_VTX_PROTECTION (see code), which is caused by out-of-bounds indices in index buffers (and perhaps other vertex-related stuff): maybe it does something similar on nv50. Also, wouldn't some of this apply to pre-nv50 too? Or is that already implemented?