chore(memory-bank): record the group E decisions

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: AI Assistant <ai@example.com>

.memory-bank/activeContext.md

@@ -57,7 +57,10 @@ the PRs, and tags `5.0.0-rc2` after the merges.
   the `*-Item2` cmdlets: Windows PowerShell 379 passed, 23 skipped;
   PowerShell 7 348 passed, 54 skipped (402 tests).
 
+- `ai/decisions-e` implements D2 to D5 (Decision 13): Windows PowerShell
+  395 passed, 26 skipped; PowerShell 7 366 passed, 55 skipped (421
+  tests). `Get-FileHash2` tests now run in PowerShell 7 as well.
+
 ## Next step
 
-The E decisions on `ai/decisions-e` (Decision 13 for `Set-NTFSInheritance`),
-then the bugs from the issue triage (`ai/issue-fixes`) and 5.0.0-rc2.
+The bugs from the issue triage (`ai/issue-fixes`), then 5.0.0-rc2.

.memory-bank/progress.md

@@ -166,19 +166,14 @@ Numbered as agreed with the maintainer; each is documented on its page.
 - Found with group D: `-PassThru` of the `*-Item2` cmdlets wrote the item
   also when `-WhatIf` skipped the operation.
 
-#### E: Maintainer decisions before changing behavior
-
-- `Clear-NTFSAccess -DisableInheritance` removes the explicit entries and
-  then disables inheritance without copying the inherited ones, which
-  leaves an empty DACL: keep that, or copy them?
-- `Set-NTFSInheritance` differs from the dedicated cmdlets in two of four
-  directions: `-AccessInheritanceEnabled $false` removes the inherited
-  access entries, and `-AuditInheritanceEnabled $true` removes the
-  explicit audit entries; the dedicated cmdlets keep them unless a switch
-  is given. Align?
-- The audit inheritance switches are named `*AccessRules`: add
-  `*AuditRules` aliases?
-- `Get-FileHash2` fails in PowerShell 7 (`RIPEMD160`): drop the algorithm
-  there, load it lazily, or deprecate the cmdlet? To verify:
-  `MACTripleDES.Create()` may use a random key, so its result would differ
-  on every call.
+#### E: Maintainer decisions (implemented on `ai/decisions-e`, not merged)
+
+- D2: `Clear-NTFSAccess -DisableInheritance` keeps leaving an empty DACL;
+  the page states the result and the risk, and a test pins it.
+- D3: `Set-NTFSInheritance` keeps entries like the dedicated cmdlets
+  (Decision 13; listed under `Changed`).
+- D4: `-RemoveInheritedAuditRules` and `-RemoveExplicitAuditRules`, with
+  the `*AccessRules` names as aliases.
+- D5: `Get-FileHash2` works in PowerShell 7; `RIPEMD160` and
+  `MACTripleDES` stop it there with `HashAlgorithmNotAvailable`.
+  `MACTripleDES` uses a random key (verified), so it is deprecated.