here's how the address gets decoded. the register on the left is normally disabled, so the pullup and pulldown resistor arrays set up the address comparator to "E8" which is the autoconfig space. during configuration, the card gets assigned a new address which gets latched in the register and overrides the default address. simple and elegant.
i've been reading the Amiga 1000 Assembly and Component Level Repair manual and found this interesting memory map diagram. notice what is stored from F00000-F7FFFF? it is marked "CART." could this have been for a game cartridge slot? the Comspec SCSI card puts its autostart ROM here.