We're implementing the immediate input instruction for BRX onboard inputs...PLC side is done. Embarrassingly easy.
It looks like the physical layer for SSI is RS485, so I'm not sure how the interface between single-ended I/O and differential pairs would work, but having a bit bang capability is useful for other things like SPI or I2C. For folks skilled in such things, many neat things are possible.
As an FYI, using a series of immediate output instructions, I can generate a clock of about 200kHz. That would drop a little once once the input instructions were thrown in, but it should still be 150kHz or better. Easily fast enough to sample something like an encoder.