I think it's common sense that such documents and tools related to internal functions of the wifi hardware are not publicly available, otherwise this thread would never exist because either
- the documents would be available for download from the QCA website, or
- the original poster had a written agreement with QCA, in which case they would be receiving support directly from QCA,
but neither of these seems to be the case here.
I wonder how many times driver developers are "lucky" that some OEM would release GPL sources and accidentally forget to exclude stuff that should not be public, but it's probably not the first time this had been discussed here in the forums.
And as you pointed out correctly, it probably also depends on your country's legislation - here it europe it's perfectly legal to own a device that could transmit or receive on arbitrary frequencies, but it's a completely different thing whether you're allowed to operate it; however if you have a faraday cage in your basement it should be fine...
Regarding the documents, I'm not sure whether it might even be covered by the "reverse engineering paragraph" (i.e. if some non-EU company refuses you the information required to implement interoperabilty, it must not be to your company's economical disadvantage, otherwise you'd be allowed to reverse engineer it).
Forum moderators shall feel free to remove any of the links I posted above though, all of if was found using google and github search.
Honestly, I did not know about the TX99 support existing in the driver, could this post be marked as the "best solution" etc. so it would show up directly below the question?
This clearly sounds like the best way to deal with it, apparently the knowledge required to implement this TX99 mode has magically made it into the driver without anyone ever reading documents that were not intended for their eyes.