The franken-file was bits and pieces of the update blobs and other pieces of system images. I was trying to get a 8656 boot/recovery with an 3.2 system image. These all match in theory, but the system image came from a different nvflash batch.
The sane version is where the boot/recovery/bootloader all came from the same blob and I flashed the system via CWM.
There is something odd about the 3.2 OTA. I flashed back to stock 8239, but I couldn't flash the OTA, after sequentially upgrading. I think the fingerprint is off and the OTA hangs on the file checks.
I think my SOD's were caused by bad flashes, but that doesn't explain the SODs on stock systems.