Simon, are you going to publish a protocol?
Specifically: What packets are exchanged during the binding process and what are their formats/bytes?
Do you know how the Tx selects the set of channels to hop through (when its not picking them by free space on the spektrum)?
Some have started working on answering these questions for DSM2/DSMX. here: http://www.rcgroups.com/forums/showthread.php?t=1759502