Update: it works. We're reading the game's framebuffer at native 1080p, 59 fps.
Since the first post, the capture problem is solved. Not through the graphics stack - all three routes there stayed closed - but around it, via the kernel debug SVCs, the same ones Atmosphere's own cheat engine uses...