docs: record the lab acceptance of the final 5.0.0-rc6 candidate

The acceptance ran three times, for acfe3af, 1b9edbb, and 7b0781f, the
last commit that changes the module; each run passed 326 tests in both
editions with no failure. The record now describes the run of 7b0781f,
with its hashes, readiness, checkpoint, and the checked removal of the
fixture after each run, and names the earlier runs.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: AI Assistant <ai@example.com>

Tests/Lab/Acceptance-2026-10-08-5.0.0-rc6.md

@@ -4,10 +4,17 @@ Acceptance of the release candidate 5.0.0-rc6 in the lab, on 2026-10-08,
 before the pull request. It follows the procedure in the
 [README](README.md#acceptance-of-a-release-candidate).
 
+The candidate changed twice during the acceptance. The run of `acfe3af`
+passed; the coverage report of the candidate then found three defects,
+which `0df2482` and `1b9edbb` fix, and the run of `1b9edbb` passed as
+well; a second review led to `7b0781f`. This record describes the run of
+`7b0781f`, the last commit of the pull request that changes the module,
+and names the results of the earlier runs.
+
 ## Candidate
 
 - Branch `ai/release-5.0.0-rc6`, commit
-  `acfe3af4cf184e6b12b0bf9b20a8a4d65149b01c`, 26 commits on `fcb370e`
+  `7b0781ff8bb2c1ee4087a16411acd4c7070ba1fa`, 31 commits on `fcb370e`
   (5.0.0-rc5).
 - Release build of that commit, packaged with
   `.github\scripts\New-ModulePackage.ps1`. The live tests imported the
@@ -17,10 +24,10 @@ before the pull request. It follows the procedure in the
 
 | SHA-256 | File |
 | --- | --- |
-| `30F9694556CB3ADB57D0455AC8E917FA7DC405770DAD3F8C37F42337AECE6374` | `NTFSSecurity.5.0.0-rc6.nupkg` |
+| `E99B5123F45E4F56AC005C629C2241DC616B2AAC152C17EA57A67C0823FFCA10` | `NTFSSecurity.5.0.0-rc6.nupkg` |
-| `2A1E5482A67167658A33C7977D7251681F25D4EA437C06B441B5EAAC1016EF55` | `NTFSSecurity.zip` |
+| `53C020EAD59467A407ED755F3D9296E9C70AFFAB184CF9CDF27AF92117FBBEE0` | `NTFSSecurity.zip` |
-| `D308BD24061DEBB633F7A11C924D6347457C530924ACDD4893BEA48BEC58B63E` | `NTFSSecurity\NTFSSecurity.dll` |
+| `F438D7FDB3F5A1D75F5CA48D7B610EED31215FF1BF9C185C6856AA365D195C8D` | `NTFSSecurity\NTFSSecurity.dll` |
-| `32C8EA2A55F8721F7953A4E1DE382E1DA6D1CD4BBA844347DD1CA4DA38661D04` | `NTFSSecurity\Security2.dll` |
+| `EE1B0DF9619C998A4482F3F79DCB2191BBEAD859660D6D924D1F333DBE7CBBCE` | `NTFSSecurity\Security2.dll` |
 | `902157ABBD2E0B76DA744A918BDD174D5226C3494908ABA75F9E5DE28AE6A008` | `NTFSSecurity\ProcessPrivileges.dll` |
 | `E2077AFEB38703345AE7857C1266F8B26E167ED887BFFAC8C8169A8F267BE6E9` | `NTFSSecurity\PrivilegeControl.dll` |
 | `A8DA47194AB0F71232C69D01955AD93BA73C7ECEB58D0DE800CA085D4A2E18D8` | `NTFSSecurity\AlphaFS.dll` |
@@ -29,19 +36,22 @@ before the pull request. It follows the procedure in the
 | `59583423241951EBE0FC2D8237D0C28C3ECC8C7CD2C115D2660F8579888632FC` | `NTFSSecurity\NTFSSecurity.Init.ps1` |
 | `FB0920CC37ED858F55AFD54998DC854E27FBBE6A0177CB059CB03CFE91361197` | `NTFSSecurity\NTFSSecurity.format.ps1xml` |
 | `CB6882FF91E6716605D5599E7B464C3346E461216ACED07E847621738F04FB9B` | `NTFSSecurity\NTFSSecurity.types.ps1xml` |
-| `DF9657E224E1DDA6D933099A3A09F7E794391B307FD4DDD1C8358049961BF146` | `NTFSSecurity\en-US\NTFSSecurity.dll-Help.xml` |
+| `5115D0D76CA2A06795CD754539AC7EC19A70591E8C5616E7BEB5AE66E6971E6D` | `NTFSSecurity\en-US\NTFSSecurity.dll-Help.xml` |
 
 ## Tests without a lab
 
-The Pester suite of the commit, 657 tests, against the same build. No test
+The Pester suite of the commit, 684 tests, against the same build. No test
 failed, and every test ran in at least one configuration.
 
 | Configuration | Passed | Failed | Skipped |
 | --- | ---: | ---: | ---: |
-| Windows PowerShell 5.1, elevated | 635 | 0 | 22 |
+| Windows PowerShell 5.1, elevated | 662 | 0 | 22 |
-| PowerShell 7, elevated | 605 | 0 | 52 |
+| PowerShell 7, elevated | 632 | 0 | 52 |
-| Windows PowerShell 5.1, basic user | 566 | 0 | 91 |
+| Windows PowerShell 5.1, basic user | 590 | 0 | 94 |
-| PowerShell 7, basic user | 536 | 0 | 121 |
+| PowerShell 7, basic user | 560 | 0 | 124 |
+
+The C# coverage of the four configurations, measured with AltCover on
+`1b9edbb`: 68.1% of the lines and 44.3% of the branches.
 
 ## Lab
 
@@ -57,19 +67,22 @@ Windows Server 2025 Datacenter (10.0.26100).
 | `F2DC1` | `forest2.net` | Account of another forest |
 | `F3DC1` | `forest3.net` | Account of another forest |
 
-Readiness, 11:06 to 11:07 UTC: WinRM answered on all six machines. The
+Readiness, checked before each run: WinRM answered on all six machines.
-four domain controllers answered LDAP (RootDSE, synchronized) and issued a
+The four domain controllers answered LDAP (RootDSE, synchronized) and
-Kerberos ticket for `krbtgt`. The client and the file server found a
+issued a Kerberos ticket for `krbtgt`. The client and the file server
-domain controller, had a working secure channel, and got a service ticket
+found a domain controller, had a working secure channel, and got a service
-for each other. The clocks were 4.3 to 5.0 seconds ahead of the host.
+ticket for each other. The clocks were 4.3 to 5.0 seconds ahead of the
+host.
 
-Checkpoint `ntfs-rc6-acfe3af-before-acceptance` (Production) of the six
+Checkpoints (Production) of the six machines, taken before each run:
-machines, taken 11:07 to 11:08 UTC before the run.
+`ntfs-rc6-acfe3af-before-acceptance` (11:07 UTC),
+`ntfs-rc6-1b9edbb-before-acceptance` (12:21 UTC), and
+`ntfs-rc6-7b0781f-before-acceptance` (12:50 UTC).
 
 ## Results
 
 `Invoke-NTFSSecurityLabTest.ps1 -ModulePath <extracted package>` in both
-editions, 11:08 to 11:25 UTC. The module reported version 5.0.0-rc6 in
+editions, 12:51 to 13:07 UTC. The module reported version 5.0.0-rc6 in
 every role that loads it.
 
 | Edition | Role | Passed | Failed | Skipped |
@@ -88,6 +101,9 @@ load the module. The accounts of the other domain and forests were
 `B\NtfsLiveForeign`, `forest2\NtfsLiveForeign`, and
 `forest3\NtfsLiveForeign`; their 13 tests passed in both editions.
 
+The earlier runs had the same counts and no failure: `acfe3af` from 11:08
+to 11:25 UTC, and `1b9edbb` from 12:23 to 12:39 UTC.
+
 ## Baseline
 
 The published 5.0.0-rc5 from the PowerShell Gallery, whose hash the script
@@ -102,10 +118,12 @@ cover the other fixes of 5.0.0-rc6.
 
 ## Cleanup
 
-`Invoke-NTFSSecurityLabTest.ps1 -RemoveFixture`, 11:38 UTC, after the
+`Invoke-NTFSSecurityLabTest.ps1 -RemoveFixture` after each run: at 11:38
-baseline. The check compared the lab with the 10 SIDs of the fixture's
+UTC after the first run and the baseline, at 12:48 UTC after the second,
-accounts and groups, read before the removal; the same check had found the
+and at 13:09 UTC after the third. Each check compared the lab with the 10
-fixture before the removal:
+SIDs of the fixture's accounts and groups, read before the removal; the
+same check had found the fixture before the first removal. After each
+removal:
 
 - No domain has the organizational unit `NTFSSecurityLive` or an account
   whose name starts with `NtfsLive`.
@@ -117,8 +135,8 @@ fixture before the removal:
   and Remote Management Users have no member of the fixture, and no
   profile of the fixture's accounts is left.
 
-The checkpoint `ntfs-rc6-acfe3af-before-acceptance` stays on the six
+The three checkpoints stay on the six machines until the maintainer
-machines until the maintainer deletes it.
+deletes them.
 
 ## Not covered