diff --git a/Tests/Lab/Acceptance-2026-10-10-os-matrix-FirstLab.csv b/Tests/Lab/Acceptance-2026-10-10-os-matrix-FirstLab.csv
new file mode 100644
index 0000000..19a51c4
--- /dev/null
+++ b/Tests/Lab/Acceptance-2026-10-10-os-matrix-FirstLab.csv
@@ -0,0 +1,9 @@
+"Version","Edition","Role","Account","ExitCode","Passed","Failed","Skipped"
+"local","Desktop","Delegate","A\NtfsLiveDelegate","0","69","0","0"
+"local","Desktop","ServerAdmin","A\NtfsLiveServerAdmin","0","36","0","0"
+"local","Desktop","Admin","A\NtfsLiveAdmin","0","64","0","0"
+"local","Desktop","Server","A\install","0","76","0","1"
+"local","Core","Delegate","A\NtfsLiveDelegate","0","69","0","0"
+"local","Core","ServerAdmin","A\NtfsLiveServerAdmin","0","36","0","0"
+"local","Core","Admin","A\NtfsLiveAdmin","0","64","0","0"
+"local","Core","Server","A\install","0","76","0","1"
diff --git a/Tests/Lab/Acceptance-2026-10-10-os-matrix-Timeline.csv b/Tests/Lab/Acceptance-2026-10-10-os-matrix-Timeline.csv
index ed18ec2..8bbb946 100644
--- a/Tests/Lab/Acceptance-2026-10-10-os-matrix-Timeline.csv
+++ b/Tests/Lab/Acceptance-2026-10-10-os-matrix-Timeline.csv
@@ -1,44 +1,44 @@
-"Run","Candidate","FileServer","Edition","Subject","SubjectRid","SameSubjectAsPreviousCell","PreviousRemoval","AccountsCreated","AdminRoleStarted","MinutesRemovalToCreation","MinutesCreationToAdmin","MinutesRemovalToAdmin","T1ServerNameFileServer","T2DefaultServerName","T3UnreachableServerName","EffectiveAccessFailures"
-"rc7c","83149ee","OSFile19","Desktop","osmatrix\NtfsLiveSubject","1110","False","","2026-10-09 23:43:43","2026-10-09 23:46:33","","2.8","","pass 276ms","pass 43ms","pass 12.1s","0"
-"rc7c","83149ee","OSFile19","Core","osmatrix\NtfsLiveSubject","1110","False","","2026-10-09 23:43:43","2026-10-09 23:48:09","","4.4","","pass 165ms","pass 24ms","pass 11.06s","0"
-"rc7c","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1110","True","","2026-10-09 23:49:38","2026-10-09 23:52:16","","2.6","","pass 439ms","pass 37ms","pass 11.47s","0"
-"rc7c","83149ee","OSFile22","Core","osmatrix\NtfsLiveSubject","1110","True","","2026-10-09 23:49:38","2026-10-09 23:53:48","","4.2","","pass 164ms","pass 33ms","pass 11.76s","0"
-"rc7c","83149ee","OSFile25","Desktop","osmatrix\NtfsLiveSubject","1110","True","","2026-10-09 23:55:37","2026-10-09 23:58:32","","2.9","","pass 423ms","pass 41ms","pass 11.95s","0"
-"rc7c","83149ee","OSFile25","Core","osmatrix\NtfsLiveSubject","1110","True","","2026-10-09 23:55:37","2026-10-10 00:01:33","","5.9","","pass 129ms","pass 40ms","pass 11.58s","0"
-"rc7e","83149ee","OSFile19","Desktop","osmatrix\NtfsLiveSubject","1130","True","2026-10-10 00:04:09","2026-10-10 00:20:59","2026-10-10 00:23:36","16.8","2.6","19.5","pass 250ms","pass 37ms","pass 11.55s","0"
-"rc7e","83149ee","OSFile19","Core","osmatrix\NtfsLiveSubject","1130","True","2026-10-10 00:04:09","2026-10-10 00:20:59","2026-10-10 00:25:03","16.8","4.1","20.9","pass 147ms","pass 26ms","pass 11.16s","0"
-"rc7e","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1130","True","","2026-10-10 00:26:33","2026-10-10 00:29:19","","2.8","","pass 445ms","pass 36ms","pass 12.11s","0"
-"rc7e","83149ee","OSFile22","Core","osmatrix\NtfsLiveSubject","1130","True","","2026-10-10 00:26:33","2026-10-10 00:30:47","","4.2","","pass 158ms","pass 31ms","pass 12.09s","0"
-"rc7e","83149ee","OSFile25","Desktop","osmatrix\NtfsLiveSubject","1141","True","2026-10-10 00:31:54","2026-10-10 00:32:55","2026-10-10 00:35:48","1.0","2.9","3.9","pass 256ms","pass 28ms","pass 12.11s","0"
-"rc7e","83149ee","OSFile25","Core","osmatrix\NtfsLiveSubject","1141","True","2026-10-10 00:31:54","2026-10-10 00:32:55","2026-10-10 00:41:22","1.0","8.5","9.5","pass 137ms","pass 50ms","pass 11.22s","0"
-"rc7f","fdd7a8b","OSFile19","Desktop","osmatrix\NtfsLiveSubject","1153","True","2026-10-10 00:44:09","2026-10-10 02:10:50","2026-10-10 02:13:46","86.7","2.9","89.6","pass 287ms","pass 44ms","pass 11.53s","0"
-"rc7f","fdd7a8b","OSFile19","Core","osmatrix\NtfsLiveSubject","1153","True","2026-10-10 00:44:09","2026-10-10 02:10:50","2026-10-10 02:15:21","86.7","4.5","91.2","pass 143ms","pass 31ms","pass 11.26s","0"
-"rc7f","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1162","True","2026-10-10 02:16:36","2026-10-10 02:17:38","2026-10-10 02:20:32","1.0","2.9","3.9","pass 302ms","FAIL 553ms 0x100000","pass 11.26s","1"
-"rc7f","fdd7a8b","OSFile22","Core","osmatrix\NtfsLiveSubject","1162","True","2026-10-10 02:16:36","2026-10-10 02:17:38","2026-10-10 02:22:01","1.0","4.4","5.4","pass 174ms","FAIL 80ms 0x100000","pass 11.72s","1"
-"rc7g","fdd7a8b","OSFile25","Desktop","osmatrix\NtfsLiveSubject","1171","True","2026-10-10 02:23:08","2026-10-10 02:28:21","2026-10-10 02:31:16","5.2","2.9","8.1","pass 265ms","pass 35ms","pass 11.65s","0"
-"rc7g","fdd7a8b","OSFile25","Core","osmatrix\NtfsLiveSubject","1171","True","2026-10-10 02:23:08","2026-10-10 02:28:21","2026-10-10 02:34:21","5.2","6.0","11.2","pass 161ms","pass 27ms","pass 12.04s","0"
-"rc7h","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1180","True","2026-10-10 02:35:34","2026-10-10 02:36:51","2026-10-10 02:39:41","1.3","2.8","4.1","pass 292ms","FAIL 626ms 0x100000","pass 11.23s","1"
-"rc7h","fdd7a8b","OSFile22","Core","osmatrix\NtfsLiveSubject","1180","True","2026-10-10 02:35:34","2026-10-10 02:36:51","2026-10-10 02:41:11","1.3","4.3","5.6","pass 174ms","FAIL 80ms 0x100000","pass 11.3s","1"
-"rc7i","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1189","True","2026-10-10 02:42:17","2026-10-10 02:46:06","2026-10-10 02:49:01","3.8","2.9","6.7","FAIL 827ms 0x100000","pass 40ms","pass 11.02s","1"
-"rc7i","fdd7a8b","OSFile22","Core","osmatrix\NtfsLiveSubject","1189","True","2026-10-10 02:42:17","2026-10-10 02:46:06","2026-10-10 02:50:32","3.8","4.4","8.3","pass 169ms","pass 34ms","pass 12.05s","0"
-"rc7j","962887a","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1198","True","2026-10-10 02:51:38","2026-10-10 02:52:37","2026-10-10 02:55:28","1.0","2.9","3.8","FAIL 884ms 0x100000","FAIL 36ms 0x100000","pass 11s","2"
-"rc7j","962887a","OSFile22","Core","osmatrix\NtfsLiveSubject","1198","True","2026-10-10 02:51:38","2026-10-10 02:52:37","2026-10-10 02:56:55","1.0","4.3","5.3","FAIL 226ms 0x100000","FAIL 34ms 0x100000","pass 11.46s","2"
-"rc7k","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1207","True","2026-10-10 02:58:00","2026-10-10 02:58:58","2026-10-10 03:01:50","1.0","2.9","3.8","pass 312ms","pass 36ms","pass 12.26s","0"
-"rc7k","83149ee","OSFile22","Core","osmatrix\NtfsLiveSubject","1207","True","2026-10-10 02:58:00","2026-10-10 02:58:58","2026-10-10 03:03:20","1.0","4.4","5.3","pass 163ms","pass 25ms","pass 12.1s","0"
-"rc7l","fdd7a8b","OSFile19","Desktop","osmatrix\NtfsLiveSubject0602","1279","False","2026-10-10 03:04:28","2026-10-10 03:45:30","2026-10-10 03:48:27","41.0","3.0","44.0","pass 300ms","pass 52ms","pass 11.59s","0"
-"rc7l","fdd7a8b","OSFile19","Core","osmatrix\NtfsLiveSubject0602","1279","False","2026-10-10 03:04:28","2026-10-10 03:45:30","2026-10-10 03:49:59","41.0","4.5","45.5","pass 148ms","pass 56ms","pass 11.03s","0"
-"rc7l","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject6688","1290","False","2026-10-10 03:51:09","2026-10-10 03:52:12","2026-10-10 03:55:03","1.1","2.9","3.9","pass 298ms","pass 42ms","pass 11.35s","0"
-"rc7l","fdd7a8b","OSFile22","Core","osmatrix\NtfsLiveSubject6688","1290","False","2026-10-10 03:51:09","2026-10-10 03:52:12","2026-10-10 03:56:29","1.1","4.3","5.3","pass 141ms","pass 34ms","pass 11.24s","0"
-"rc7l","fdd7a8b","OSFile25","Desktop","osmatrix\NtfsLiveSubject4884","1298","False","2026-10-10 03:57:33","2026-10-10 03:58:35","2026-10-10 04:01:28","1.0","2.9","3.9","pass 303ms","pass 46ms","pass 11.29s","0"
-"rc7l","fdd7a8b","OSFile25","Core","osmatrix\NtfsLiveSubject4884","1298","False","2026-10-10 03:57:33","2026-10-10 03:58:35","2026-10-10 04:04:32","1.0","6.0","7.0","pass 152ms","pass 27ms","pass 12.12s","0"
-"ab0","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1318","False","2026-10-10 04:06:55","2026-10-10 04:58:03","2026-10-10 05:00:57","51.1","2.9","54.0","pass 289ms","pass 42ms","pass 11.51s","0"
-"ab1","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1326","True","2026-10-10 05:02:19","2026-10-10 05:03:18","2026-10-10 05:06:09","1.0","2.9","3.8","FAIL 817ms 0x100000","FAIL 34ms 0x100000","pass 11.17s","2"
-"ab2","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1334","True","2026-10-10 05:07:28","2026-10-10 05:08:28","2026-10-10 05:11:12","1.0","2.7","3.7","pass 297ms","pass 55ms","pass 12.2s","0"
-"ab3","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1342","True","2026-10-10 05:12:32","2026-10-10 05:13:31","2026-10-10 05:16:23","1.0","2.9","3.9","FAIL 825ms 0x100000","FAIL 36ms 0x100000","pass 12.18s","2"
-"ab4","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1350","True","2026-10-10 05:17:43","2026-10-10 05:18:42","2026-10-10 05:21:34","1.0","2.9","3.9","pass 283ms","pass 47ms","pass 12.25s","0"
-"ab5","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1358","True","2026-10-10 05:23:04","2026-10-10 05:24:05","2026-10-10 05:26:57","1.0","2.9","3.9","FAIL 804ms 0x100000","FAIL 35ms 0x100000","pass 11.71s","2"
-"ab6","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1366","True","2026-10-10 05:28:16","2026-10-10 05:29:14","2026-10-10 05:32:04","1.0","2.8","3.8","pass 289ms","pass 51ms","pass 11.13s","0"
-"ab7","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject8013","1374","False","2026-10-10 05:33:22","2026-10-10 05:37:15","2026-10-10 05:40:11","3.9","2.9","6.8","pass 280ms","pass 45ms","pass 12.2s","0"
-"ab8","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject0900","1382","False","2026-10-10 05:41:34","2026-10-10 05:42:38","2026-10-10 05:45:32","1.1","2.9","4.0","pass 300ms","pass 40ms","pass 11.89s","0"
-"ab9","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject7705","1391","False","2026-10-10 05:46:54","2026-10-10 05:48:00","2026-10-10 05:50:54","1.1","2.9","4.0","pass 265ms","pass 40ms","pass 12.16s","0"
-"ab10","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject8799","1399","False","2026-10-10 05:52:14","2026-10-10 05:53:18","2026-10-10 05:56:12","1.1","2.9","4.0","pass 272ms","pass 35ms","pass 11.07s","0"
+"Run","Candidate","FileServer","Edition","Subject","SubjectRid","SameNameAsPreviousCell","SameAccountAsPreviousCell","PreviousRemoval","AccountsCreated","AdminRoleStarted","MinutesRemovalToCreation","MinutesCreationToAdmin","MinutesRemovalToAdmin","T1ServerNameFileServer","T2DefaultServerName","T3UnreachableServerName","EffectiveAccessFailures"
+"rc7c","83149ee","OSFile19","Desktop","osmatrix\NtfsLiveSubject","1110","False","False","","2026-10-09 23:43:43","2026-10-09 23:46:33","","2.8","","pass 276ms","pass 43ms","pass 12.1s","0"
+"rc7c","83149ee","OSFile19","Core","osmatrix\NtfsLiveSubject","1110","False","False","","2026-10-09 23:43:43","2026-10-09 23:48:09","","4.4","","pass 165ms","pass 24ms","pass 11.06s","0"
+"rc7c","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1110","True","True","","2026-10-09 23:49:38","2026-10-09 23:52:16","","2.6","","pass 439ms","pass 37ms","pass 11.47s","0"
+"rc7c","83149ee","OSFile22","Core","osmatrix\NtfsLiveSubject","1110","True","True","","2026-10-09 23:49:38","2026-10-09 23:53:48","","4.2","","pass 164ms","pass 33ms","pass 11.76s","0"
+"rc7c","83149ee","OSFile25","Desktop","osmatrix\NtfsLiveSubject","1110","True","True","","2026-10-09 23:55:37","2026-10-09 23:58:32","","2.9","","pass 423ms","pass 41ms","pass 11.95s","0"
+"rc7c","83149ee","OSFile25","Core","osmatrix\NtfsLiveSubject","1110","True","True","","2026-10-09 23:55:37","2026-10-10 00:01:33","","5.9","","pass 129ms","pass 40ms","pass 11.58s","0"
+"rc7e","83149ee","OSFile19","Desktop","osmatrix\NtfsLiveSubject","1130","True","False","2026-10-10 00:16:22","2026-10-10 00:20:59","2026-10-10 00:23:36","4.6","2.6","7.2","pass 250ms","pass 37ms","pass 11.55s","0"
+"rc7e","83149ee","OSFile19","Core","osmatrix\NtfsLiveSubject","1130","True","False","2026-10-10 00:16:22","2026-10-10 00:20:59","2026-10-10 00:25:03","4.6","4.1","8.7","pass 147ms","pass 26ms","pass 11.16s","0"
+"rc7e","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1130","True","True","","2026-10-10 00:26:33","2026-10-10 00:29:19","","2.8","","pass 445ms","pass 36ms","pass 12.11s","0"
+"rc7e","83149ee","OSFile22","Core","osmatrix\NtfsLiveSubject","1130","True","True","","2026-10-10 00:26:33","2026-10-10 00:30:47","","4.2","","pass 158ms","pass 31ms","pass 12.09s","0"
+"rc7e","83149ee","OSFile25","Desktop","osmatrix\NtfsLiveSubject","1141","True","False","2026-10-10 00:31:54","2026-10-10 00:32:55","2026-10-10 00:35:48","1.0","2.9","3.9","pass 256ms","pass 28ms","pass 12.11s","0"
+"rc7e","83149ee","OSFile25","Core","osmatrix\NtfsLiveSubject","1141","True","False","2026-10-10 00:31:54","2026-10-10 00:32:55","2026-10-10 00:41:22","1.0","8.5","9.5","pass 137ms","pass 50ms","pass 11.22s","0"
+"rc7f","fdd7a8b","OSFile19","Desktop","osmatrix\NtfsLiveSubject","1153","True","False","2026-10-10 00:44:09","2026-10-10 02:10:50","2026-10-10 02:13:46","86.7","2.9","89.6","pass 287ms","pass 44ms","pass 11.53s","0"
+"rc7f","fdd7a8b","OSFile19","Core","osmatrix\NtfsLiveSubject","1153","True","False","2026-10-10 00:44:09","2026-10-10 02:10:50","2026-10-10 02:15:21","86.7","4.5","91.2","pass 143ms","pass 31ms","pass 11.26s","0"
+"rc7f","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1162","True","False","2026-10-10 02:16:36","2026-10-10 02:17:38","2026-10-10 02:20:32","1.0","2.9","3.9","pass 302ms","FAIL 553ms 0x100000","pass 11.26s","1"
+"rc7f","fdd7a8b","OSFile22","Core","osmatrix\NtfsLiveSubject","1162","True","False","2026-10-10 02:16:36","2026-10-10 02:17:38","2026-10-10 02:22:01","1.0","4.4","5.4","pass 174ms","FAIL 80ms 0x100000","pass 11.72s","1"
+"rc7g","fdd7a8b","OSFile25","Desktop","osmatrix\NtfsLiveSubject","1171","True","False","2026-10-10 02:23:08","2026-10-10 02:28:21","2026-10-10 02:31:16","5.2","2.9","8.1","pass 265ms","pass 35ms","pass 11.65s","0"
+"rc7g","fdd7a8b","OSFile25","Core","osmatrix\NtfsLiveSubject","1171","True","False","2026-10-10 02:23:08","2026-10-10 02:28:21","2026-10-10 02:34:21","5.2","6.0","11.2","pass 161ms","pass 27ms","pass 12.04s","0"
+"rc7h","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1180","True","False","2026-10-10 02:35:34","2026-10-10 02:36:51","2026-10-10 02:39:41","1.3","2.8","4.1","pass 292ms","FAIL 626ms 0x100000","pass 11.23s","1"
+"rc7h","fdd7a8b","OSFile22","Core","osmatrix\NtfsLiveSubject","1180","True","False","2026-10-10 02:35:34","2026-10-10 02:36:51","2026-10-10 02:41:11","1.3","4.3","5.6","pass 174ms","FAIL 80ms 0x100000","pass 11.3s","1"
+"rc7i","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1189","True","False","2026-10-10 02:42:17","2026-10-10 02:46:06","2026-10-10 02:49:01","3.8","2.9","6.7","FAIL 827ms 0x100000","pass 40ms","pass 11.02s","1"
+"rc7i","fdd7a8b","OSFile22","Core","osmatrix\NtfsLiveSubject","1189","True","False","2026-10-10 02:42:17","2026-10-10 02:46:06","2026-10-10 02:50:32","3.8","4.4","8.3","pass 169ms","pass 34ms","pass 12.05s","0"
+"rc7j","962887a","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1198","True","False","2026-10-10 02:51:38","2026-10-10 02:52:37","2026-10-10 02:55:28","1.0","2.9","3.8","FAIL 884ms 0x100000","FAIL 36ms 0x100000","pass 11s","2"
+"rc7j","962887a","OSFile22","Core","osmatrix\NtfsLiveSubject","1198","True","False","2026-10-10 02:51:38","2026-10-10 02:52:37","2026-10-10 02:56:55","1.0","4.3","5.3","FAIL 226ms 0x100000","FAIL 34ms 0x100000","pass 11.46s","2"
+"rc7k","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1207","True","False","2026-10-10 02:58:00","2026-10-10 02:58:58","2026-10-10 03:01:50","1.0","2.9","3.8","pass 312ms","pass 36ms","pass 12.26s","0"
+"rc7k","83149ee","OSFile22","Core","osmatrix\NtfsLiveSubject","1207","True","False","2026-10-10 02:58:00","2026-10-10 02:58:58","2026-10-10 03:03:20","1.0","4.4","5.3","pass 163ms","pass 25ms","pass 12.1s","0"
+"rc7l","fdd7a8b","OSFile19","Desktop","osmatrix\NtfsLiveSubject0602","1279","False","False","2026-10-10 03:04:28","2026-10-10 03:45:30","2026-10-10 03:48:27","41.0","3.0","44.0","pass 300ms","pass 52ms","pass 11.59s","0"
+"rc7l","fdd7a8b","OSFile19","Core","osmatrix\NtfsLiveSubject0602","1279","False","False","2026-10-10 03:04:28","2026-10-10 03:45:30","2026-10-10 03:49:59","41.0","4.5","45.5","pass 148ms","pass 56ms","pass 11.03s","0"
+"rc7l","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject6688","1290","False","False","2026-10-10 03:51:09","2026-10-10 03:52:12","2026-10-10 03:55:03","1.1","2.9","3.9","pass 298ms","pass 42ms","pass 11.35s","0"
+"rc7l","fdd7a8b","OSFile22","Core","osmatrix\NtfsLiveSubject6688","1290","False","False","2026-10-10 03:51:09","2026-10-10 03:52:12","2026-10-10 03:56:29","1.1","4.3","5.3","pass 141ms","pass 34ms","pass 11.24s","0"
+"rc7l","fdd7a8b","OSFile25","Desktop","osmatrix\NtfsLiveSubject4884","1298","False","False","2026-10-10 03:57:33","2026-10-10 03:58:35","2026-10-10 04:01:28","1.0","2.9","3.9","pass 303ms","pass 46ms","pass 11.29s","0"
+"rc7l","fdd7a8b","OSFile25","Core","osmatrix\NtfsLiveSubject4884","1298","False","False","2026-10-10 03:57:33","2026-10-10 03:58:35","2026-10-10 04:04:32","1.0","6.0","7.0","pass 152ms","pass 27ms","pass 12.12s","0"
+"ab0","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1318","False","False","2026-10-10 04:06:55","2026-10-10 04:58:03","2026-10-10 05:00:57","51.1","2.9","54.0","pass 289ms","pass 42ms","pass 11.51s","0"
+"ab1","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1326","True","False","2026-10-10 05:02:19","2026-10-10 05:03:18","2026-10-10 05:06:09","1.0","2.9","3.8","FAIL 817ms 0x100000","FAIL 34ms 0x100000","pass 11.17s","2"
+"ab2","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1334","True","False","2026-10-10 05:07:28","2026-10-10 05:08:28","2026-10-10 05:11:12","1.0","2.7","3.7","pass 297ms","pass 55ms","pass 12.2s","0"
+"ab3","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1342","True","False","2026-10-10 05:12:32","2026-10-10 05:13:31","2026-10-10 05:16:23","1.0","2.9","3.9","FAIL 825ms 0x100000","FAIL 36ms 0x100000","pass 12.18s","2"
+"ab4","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1350","True","False","2026-10-10 05:17:43","2026-10-10 05:18:42","2026-10-10 05:21:34","1.0","2.9","3.9","pass 283ms","pass 47ms","pass 12.25s","0"
+"ab5","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1358","True","False","2026-10-10 05:23:04","2026-10-10 05:24:05","2026-10-10 05:26:57","1.0","2.9","3.9","FAIL 804ms 0x100000","FAIL 35ms 0x100000","pass 11.71s","2"
+"ab6","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject","1366","True","False","2026-10-10 05:28:16","2026-10-10 05:29:14","2026-10-10 05:32:04","1.0","2.8","3.8","pass 289ms","pass 51ms","pass 11.13s","0"
+"ab7","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject8013","1374","False","False","2026-10-10 05:33:22","2026-10-10 05:37:15","2026-10-10 05:40:11","3.9","2.9","6.8","pass 280ms","pass 45ms","pass 12.2s","0"
+"ab8","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject0900","1382","False","False","2026-10-10 05:41:34","2026-10-10 05:42:38","2026-10-10 05:45:32","1.1","2.9","4.0","pass 300ms","pass 40ms","pass 11.89s","0"
+"ab9","83149ee","OSFile22","Desktop","osmatrix\NtfsLiveSubject7705","1391","False","False","2026-10-10 05:46:54","2026-10-10 05:48:00","2026-10-10 05:50:54","1.1","2.9","4.0","pass 265ms","pass 40ms","pass 12.16s","0"
+"ab10","fdd7a8b","OSFile22","Desktop","osmatrix\NtfsLiveSubject8799","1399","False","False","2026-10-10 05:52:14","2026-10-10 05:53:18","2026-10-10 05:56:12","1.1","2.9","4.0","pass 272ms","pass 35ms","pass 11.07s","0"
diff --git a/Tests/Lab/Acceptance-2026-10-10-os-matrix.md b/Tests/Lab/Acceptance-2026-10-10-os-matrix.md
index f5f90bc..c0c613d 100644
--- a/Tests/Lab/Acceptance-2026-10-10-os-matrix.md
+++ b/Tests/Lab/Acceptance-2026-10-10-os-matrix.md
@@ -23,6 +23,9 @@ isn't a claim that the quality gate is complete.
   the Windows Server 2022 cell. A replay showed that the baseline fails the same
   way there, so the failures depend on the position of the cell and not on the
   module (see "The effective-access failures of the Admin role").
+- The final candidate also passed the live controller in the first lab, where
+  case 9 runs: 245 passed, 0 failed, 1 skipped in each edition (see "First lab,
+  final candidate").
 - The matrix found three defects of the module, fixed in two commits on the
   branch, and each was red on the machines where it shows before its fix and
   green after it: `Get-NTFSInheritance -SecurityDescriptor` for an item without
@@ -42,8 +45,9 @@ isn't a claim that the quality gate is complete.
 - Windows 11 26H1 (10.0.28000) can't keep a secure channel to the Windows
   Server 2025 domain controller of this lab, so it runs the module's suite only.
   The domain client is Windows 11 Enterprise Evaluation 22H2.
-- Open: the published package in every cell (stage D of the gate), case 9 in the
-  matrix lab, and the maintainer's decisions listed at the end.
+- Open: the published package in every cell and in the first lab (stage D of the
+  gate), and the maintainer's decisions listed at the end. The matrix lab has no
+  trusts, so case 9 runs only in the first lab.
 
 ## Machines
 
@@ -89,11 +93,17 @@ The full SHA-256 values and the hashes of every result file are in the local
 evidence (see the end). The tests of the suite are the files of the working
 tree at the commit of the run. The live tests (Git blob
 `efe36e5073b9b10742ca7de242ddcbe90d8eda62`) are those of `fdd7a8b` in every run
-from `rc7f` on. The controller of the cells `rc7f` to `rc7k` is the blob
-`683aee91ec8805d77a33b2d368acaf876724fa32` (`fdd7a8b`); the cells of `rc7l` ran
-with the blob `9917cac5820ed20ed2eb5592eff06894677f9874` (`1dec389`). The
-earlier cells of the baseline ran with the controller blobs `0b46427b…` and
-`d485b1d0…` and the live tests `67b85efe…`, before the cleanup fixes.
+from `rc7f` to `rc7l` and in the first-lab run `fl1`; the replay `ab0` to `ab10`
+ran the same file with one diagnostic test added (blob
+`72c12fe09e4005e048a8aed0fa02b9a922c58f34`, see "The effective-access failures
+of the Admin role"). The controller of the cells `rc7f` to `rc7k` and of the
+replay cells `ab0` to `ab6` is the blob `683aee91ec8805d77a33b2d368acaf876724fa32`
+(`fdd7a8b`). The cells of `rc7l` and the replay cells `ab7` to `ab10` ran with the
+blob `9917cac5820ed20ed2eb5592eff06894677f9874` (`1dec389`), and the first-lab run
+`fl1` with the blob `d269e0fe6ba5f72894dd2dcba5dca7f2dc56624f` (the head of the
+branch then, which differs from `1dec389` by a comment). The earlier cells of the
+baseline ran with the controller blobs `0b46427b…` and `d485b1d0…` and the live
+tests `67b85efe…`, before the cleanup fixes.
 
 ## Method
 
@@ -136,8 +146,9 @@ earlier cells of the baseline ran with the controller blobs `0b46427b…` and
   progress. The live tests of the replay had one test added that is not in the
   repository and prints the state of the subject account after the three
   effective-access tests. The kit has the tools that read the
-  result: `Acceptance\Export-CellTimeline.ps1` (the timeline of every cell,
-  edition, and role: the module, the account, the times, and the three tests) and
+  result: `Acceptance\Export-CellTimeline.ps1` (the timeline of the Admin role of
+  every cell and edition: the module, the account, the times, and the three
+  tests) and
   `Acceptance\Test-StaleAuthzModel.ps1` (the model of the failures, replayed
   against that timeline).
 
@@ -176,7 +187,7 @@ before `rc7l` used the controller with the fixed name of the subject:
 
 | Run | Candidate | Cells | Result per edition and cell |
 | --- | --- | --- | --- |
-| `rc7c`, `rc7e` | Baseline `83149ee`, tests before the new cases | OSFile19, 22, 25 | 227 passed, 0 failed, 2 skipped in every cell. In `rc7c`, the failed cleanup of the first cell left the accounts in place through all three cells. In `rc7e`, the first cell created new accounts 16.8 minutes after the previous removal, the second reused them, and the third created new accounts 1.0 minute after the previous removal |
+| `rc7c`, `rc7e` | Baseline `83149ee`, tests before the new cases | OSFile19, 22, 25 | 227 passed, 0 failed, 2 skipped in every cell. In `rc7c`, the failed cleanup of the first cell left the accounts in place through all three cells. `rc7d` between them created accounts and removed them 36 seconds later, because its setup failed ("Failed to compare two elements in the array", fixed in `7d47316`) before any test ran. In `rc7e`, the first cell created new accounts 4.6 minutes after that removal, the second reused them, and the third created new accounts 1.0 minute after the previous removal |
 | `rc7f` | Final `fdd7a8b` | OSFile19, OSFile22 | OSFile19: 229 / 0 / 2. OSFile22: 228 / 1 / 2, the effective-access test of the Admin role |
 | `rc7g` | Final | OSFile25 | 229 / 0 / 2 |
 | `rc7h` | Final | OSFile22 | 228 / 1 / 2, the same test |
@@ -194,6 +205,45 @@ new live tests, as intended; they pass in `rc7f`, `rc7g`, `rc7h`, `rc7i`, and
 profile) and reported only the staging folders of the earlier suite runs, which
 `Test-MatrixCleanup.ps1` didn't check before (see the limits).
 
+### First lab, final candidate (case 9)
+
+Case 9, the accounts of other domains and forests, needs the trusts of the
+first lab, so the cells of the matrix skip it. The final candidate (`fdd7a8b`,
+from the same extracted module folder as in the matrix) ran through the
+controller of the repository (blob `d269e0fe6ba5f72894dd2dcba5dca7f2dc56624f`) in
+`WindowsAccessControlLab`, both editions, on 2026-10-10 from 06:14 to 06:31 UTC
+(run `fl1`): the domain controller `F1ADC1`, the file server `F1AFile2`, and the
+client `F1AFile1` (all Windows Server 2025 Datacenter 10.0.26100.32690, domain
+`a.forest1.net`), with the foreign domain controllers `F1BDC1`, `F2DC1`, and
+`F3DC1`. `Validate-LabResults.ps1` printed `LIVE_RESULT_VERIFIED`. Passed /
+failed / skipped, the same in both editions
+([FirstLab.csv](Acceptance-2026-10-10-os-matrix-FirstLab.csv)):
+
+| Role | Passed / failed / skipped |
+| --- | --- |
+| Delegate | 69 / 0 / 0 |
+| ServerAdmin | 36 / 0 / 0 |
+| Admin | 64 / 0 / 0 |
+| Server | 76 / 0 / 1 |
+
+That is 245 passed, 0 failed, and 1 skipped per edition; the skipped test is the
+test of the module version in the Server role, which runs without the module. A
+cell of the matrix has 229 passed and 2 skipped. The 16 tests more that passed
+here are the tests of case 9: 15 that a matrix cell doesn't have (12 in the
+Admin role and 3 in the Server role: the entries of `NtfsLiveForeign` of the
+three foreign domains by `Get-NTFSAccess`, `Add-NTFSAccess`, `Remove-NTFSAccess`,
+and `Get-NTFSEffectiveAccess`, and on the file server), and the test of
+`Get-NTFSOrphanedAccess` that the matrix cells skip. Every test of a matrix
+cell is in this run too (a comparison of the test names of `rc7l` OSFile25 and
+this run found none that only the cell has). The fixture was removed with
+`-RemoveFixture`, and the independent check (`Test-MatrixCleanup.ps1`, with the
+10 SIDs that it recorded before: the accounts of the lab domain and
+`NtfsLiveForeign` in each of the three foreign domains) found the four domains
+and both machines clean: no organizational unit, account, share, folder, local
+group, membership, profile, or residue of the kit; its verdict was CLEAN. This
+is one run of one candidate. The baseline didn't run in the first lab on this
+occasion, so the record says nothing about the red state of the new tests there.
+
 ### The module's own suite, final candidate
 
 Passed / failed / skipped. Every configuration has 1,011 cases on the machines
@@ -386,10 +436,13 @@ their results. `ab0` is the warm-up and has a new fixture.
 
 In every cell from `ab1` on, the accounts were created 1.0 minute after the
 removal of the previous fixture, and the Admin role ran 3.7 to 3.9 minutes
-after it. The cells differ in the module and in the outcome only: not counting
-the warm-up `ab0`, the baseline fails two of its three cells and the final
-candidate one of its three, and the failing and the passing cells alternate. If
-the module decided, the baseline wouldn't fail.
+after it. The cells differ in the module, in the outcome, and in one more
+variable: the age of the entry that an earlier cell left for the same account
+name, counted from that cell's Admin role (5.2 to 5.4 minutes in the failing
+cells, 10.25 to 10.5 minutes in the passing ones). Not counting the warm-up
+`ab0`, the baseline fails two of its three cells and the final candidate one of
+its three, and the failing and the passing cells alternate. If the module
+decided, the baseline wouldn't fail.
 
 **What is wrong in a failing cell.** The test that runs right after the three
 tests printed the same in `ab1`, `ab3`, and `ab5`: the name `osmatrix\NtfsLiveSubject`
@@ -412,21 +465,23 @@ account was deleted and created again under the same name in the meantime. The
 file server and the client have one entry each for a name, and use doesn't
 renew it. `Test-StaleAuthzModel.ps1` replays the Admin roles of the timeline of
 all cells ([Timeline.csv](Acceptance-2026-10-10-os-matrix-Timeline.csv): `rc7c`
-to `rc7l` and `ab0` to `ab10`, 43 runs in 27 cells) against the model. With L
-from 9.35 to 10.20 minutes the model predicts the result of the first test (the
-file server) of all 43 runs, and with L from 9.95 to 10.20 minutes that of the
-second (the client): 43 of 43 for each, with 6 and 9 failures. That includes the
-cells where the two tests differ (`rc7f`, `rc7h`: the entry of the client was
-stale, the one of the file server had expired), the cells of the baseline that
-passed (`rc7e`, `rc7k`), and the cells that passed with an account name that was
-new. A random assignment of the observed outcomes to the runs (the same number of
-failures) never fits that well: none of 5,000 assignments reaches 43 of 43 for
-any L, and the best of them reaches 41 for the first test and 39 for the second
-(`-Permutations 5000`, fixed seed). I fitted the model after `ab3` and wrote
-down its predictions before they ran (in the night log of the session, outside
-the repository, at 05:20 UTC): `ab4` passes, `ab5` fails, `ab6` passes. All
-three held, and `ab5` is the baseline failing; if the module decided, `ab5`
-would have passed and `ab6` would have failed. `ab6` is the weakest of the
+to `rc7l` and `ab0` to `ab10`, 43 runs in 27 cells, and `rc7d`, which stopped
+before its tests) against the model (`-StepMinutes 0.05`, so every bound is known
+to within 0.05 minute). With L from 9.35 to 10.25 minutes the model predicts the
+result of the first test (the file server) of all 43 runs, and with L from 9.95
+to 10.25 minutes that of the second (the client): 43 of 43 for each, with 6 and 9
+failures. One L from 9.95 to 10.25 minutes serves both tests (86 of 86). That
+includes the cells where the two tests differ (`rc7f`, `rc7h`: the entry of the
+client was stale, the one of the file server had expired), the cells of the
+baseline that passed (`rc7e`, `rc7k`), and the cells that passed with an account
+name that was new. A random assignment of the observed outcomes to the runs (the
+same number of failures) never fits that well: none of 5,000 assignments reaches
+43 of 43 for any L, and the best of them reaches 41 for the first test and 39
+for the second (`-Permutations 5000`, fixed seed). I fitted the model after
+`ab3` and wrote down its predictions before they ran (in the night log of the
+session, outside the repository, at 05:20 UTC): `ab4` passes, `ab5` fails, `ab6`
+passes. All three held, and `ab5` is the baseline failing; if the module decided,
+`ab5` would have passed and `ab6` would have failed. `ab6` is the weakest of the
 three: its entry was 10.5 minutes old, a little above the lifetimes that fit.
 
 **The probes of the night.** Three probes (the second is
@@ -490,12 +545,20 @@ manager. No change of the module is needed for it.
 **What it doesn't establish.** How Windows does it: which component keeps the
 state, and why for about ten minutes. L is estimated from 43 runs on one client
 and three file servers with a cell every five minutes or so, so a different
-spacing of the cells could tell more, and the times of the model are those of
-the start of the Admin role, some seconds before the first request, so the
-bounds of L are a little uncertain. The model describes the observations that
-it was fitted to, and the three predictions are the only ones that it didn't
-see. The replay ran one edition against one file server. Whether a user can meet
-it, an administrator who deletes an account, creates it again under the same
+spacing of the cells could tell more. The window of L that fits the client test
+is 0.3 minute wide, and its bounds come from two runs (`rc7h`, whose Core run is
+9.92 minutes after the entry of `rc7g`, and `ab2`, 10.25 minutes after `ab0`).
+The times of the model are those of the start of the Admin role, some seconds
+before the first request, and the offset may differ between the editions, so the
+bounds of L are uncertain by about that much. The model describes the
+observations that it was fitted to, and the three predictions are the only ones
+that it didn't see. The replay rules out a module effect that decides the
+outcome (every position that the model predicts to fail failed for the
+baseline, the final candidate, and the baseline again, and every position that
+it predicts to pass passed for the final candidate, the baseline, and the final
+candidate), but six runs can't rule out a small or a random effect of the
+module. The replay ran one edition against one file server. Whether a user can
+meet it, an administrator who deletes an account, creates it again under the same
 name, and asks within ten minutes for its effective access on a remote computer,
 wasn't tried outside the lab. The cmdlet can't detect it: the answer of a manager
 that has no groups for the account looks like the answer for an account without
@@ -508,7 +571,7 @@ changed by this. With it, the Windows Server 2022 cell passed in `rc7l`, where t
 cells of the old controller had failed in `rc7f`, `rc7h`, `rc7i`, and `rc7j`, and
 so did the other two cells of that sequence.
 
-The committed controller (`1dec389`, blob `9917cac5820ed20ed2eb5592eff06894677f9874`)
+The controller of `1dec389` (blob `9917cac5820ed20ed2eb5592eff06894677f9874`)
 then ran four more cells of the replay, `ab7` to `ab10`: baseline, final,
 baseline, final, in Windows PowerShell against OSFile22, back to back after a
 restart of the client (05:37 to 05:58 UTC), with the same diagnostic test. Each
@@ -520,11 +583,25 @@ minutes old) and in `ab9` (5.4 minutes after `ab8`):
 
 | Cell | Module | Account of case 3 | Admin role at (UTC) | Test 1 | Test 2 | Test 3, local manager | The model, had the name been reused (`-AsIfSameSubject`) |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `ab7` | baseline | `NtfsLiveSubject8013` | 05:40:11 | pass | pass | pass | both tests FAIL |
+| `ab7` | baseline | `NtfsLiveSubject8013` | 05:40:11 | pass | pass | pass | Test 1 FAIL; Test 2 FAIL, unless the restart of the client at 05:34 cleared its entry |
 | `ab8` | final | `NtfsLiveSubject0900` | 05:45:32 | pass | pass | pass | pass |
 | `ab9` | baseline | `NtfsLiveSubject7705` | 05:50:54 | pass | pass | pass | both tests FAIL |
 | `ab10` | final | `NtfsLiveSubject8799` | 05:56:12 | pass | pass | pass | pass |
 
+The model doesn't know about restarts, and the client restarted ten times during
+the series (Hyper-V worker log, UTC: 23:37, 00:38, 01:43, 01:58, 02:43, 03:23,
+03:42, 04:07, 04:55, and 05:34; the file servers and the domain controller
+didn't restart between the first and the last run, except OSFile22 at 01:36).
+If the entry of a remote manager lives in the memory of the computer, a restart
+clears it. For the fit this changes no prediction: of the entries that the model
+keeps, only one lives across a restart and is read by a later run (the entry
+that `rc7e` made at 00:35:48 on OSFile25, read by its Core run after the restart
+at 00:38), and that run has the same account, so it passes either way. For the
+counterfactual it matters once, in the table: the restart at 05:34 came between
+`ab6` and `ab7`, so the client test of `ab7` is a prediction only if the state
+survives a restart, while the file-server test (OSFile22 didn't restart) is one
+in any case.
+
 In each cell the diagnostic test printed the right rights for all five calls
 (`0x1200A9` for the client, `0x1201BF` for the file server). In the timeline, the
 old controller failed in 7 of its 20 cells, all on OSFile22 (`rc7f`, `rc7h`,
@@ -544,7 +621,8 @@ fails, which the reuse of the name explains and the module doesn't.
   a changed binary.
 - Case 9 (accounts of other domains and forests) needs trusts that the matrix
   lab doesn't have; it runs only in `WindowsAccessControlLab`, where the
-  baseline passed it.
+  baseline passed it and the final candidate passed it in run `fl1` (see "First
+  lab, final candidate"). The published package has to run there too.
 - The file servers are Windows. A server of another kind is the subject of
   Decision 23.
 - Windows 11 26H1 has no domain cell until the domain controller or the
@@ -560,34 +638,47 @@ fails, which the reuse of the name explains and the module doesn't.
   that `Register-ScheduledTask -Password` needs.
 - The mechanism isn't known. The replay shows that the remote authorization
   managers answer for an account name from state that outlives the account, and
-  the model puts the lifetime at about ten minutes (9.35 to 10.20 minutes from 43
-  runs), but I didn't find which component keeps it, why that long, or whether it
-  is constant: all runs have the same timing, and it was fitted to them. The
-  replay ran one edition (Windows PowerShell, Desktop) against one file server
-  (OSFile22). The probes of the first regime (accounts deleted and created again
-  within seconds), in which the Kerberos S4U logon returned the old account for
-  more than seven and less than fifteen minutes, were measured once, with no
-  repetition, and five remedies (`klist purge`, `nltest /sc_reset`, a DNS flush,
-  a restart of the Kerberos service of the domain controller, and waiting) were
-  tried: only waiting helped. A script of the kit that creates accounts again
-  under one name would meet the state; the controller doesn't any more.
+  the model puts the lifetime at about ten minutes (9.95 to 10.25 minutes for
+  both tests, from 43 runs), but I didn't find which component keeps it, why that
+  long, or whether it is constant: all runs have the same timing, and it was
+  fitted to them. The replay ran one edition (Windows PowerShell, Desktop)
+  against one file server (OSFile22). The probes of the first regime (accounts
+  deleted and created again within seconds), in which the Kerberos S4U logon
+  returned the old account for more than seven and less than fifteen minutes,
+  were measured once, with no repetition, and five remedies (`klist purge`,
+  `nltest /sc_reset`, a DNS flush, a restart of the Kerberos service of the
+  domain controller, and waiting) were tried: only waiting helped. A script of
+  the kit that creates accounts again under one name would meet the state; the
+  controller doesn't any more.
 - The end-state check of the matrix reported the staging folders of the suite
   runs (`C:\NtfsMatrixLocal`) as residue in the three cells of `rc7l`, which
   made their verdict DIRTY, although the fixture was gone. The suite runner now
   removes its stage after it has copied the results back. The check counts the
-  items in the stage folders, in `C:\NtfsProbeRecreation`, and in
-  `C:\NtfsProbeModules`, the scheduled tasks of the matrix, the local `NtfsProbe*`
-  users, and the `NtfsProbe*` objects of the directory, and `-Mode Repair` removes
-  what it finds. The non-zero path ran once, with dummy residue on the five
-  machines (06:03 to 06:06 UTC): a stage item and a local user `NtfsProbeDummy`
-  on OSFile19, `C:\NtfsProbeRecreation` on OSFile22, a scheduled task
-  `NtfsMatrix-dummy` on OSFile25, `C:\NtfsProbeModules` on OSWin11E, and a
-  disabled directory user `NtfsProbeDummy`. `Verify` listed every item
-  (`probe accounts: 1`, `residue: scheduled tasks=1 stage items=0 probe users=0`
-  and so on), and the verdict expression of `Run-MatrixSequence.ps1`, read from
-  the script with the parser and not copied, gave DIRTY. `Repair` removed every
-  item, and a second `Verify` gave CLEAN. It ran once, on one lab, and only the
-  items named above were tried.
+  items in the stage folders, each of the folders `C:\NtfsProbeRecreation` and
+  `C:\NtfsProbeModules` that exists, the scheduled tasks of the matrix, the local
+  `NtfsProbe*` users, their profiles and profile folders (`C:\Users\NtfsProbe*`),
+  their entries in Performance Log Users, and the `NtfsProbe*` objects of the
+  directory, and `-Mode Repair` removes what it finds. It ran with real residue on
+  the five machines three times: at 06:03 UTC with the code of `9344ff7`, at
+  06:44 UTC with the handling of profiles and of the entries in Performance Log
+  Users that the follow-up review asked for, and at 06:51 UTC after the second run
+  had shown that the check missed the entry of a local user (`net localgroup`
+  lists a local user by its bare name, and the pattern wanted a domain prefix).
+  The last run made residue of every kind at once: a stage item and a local user
+  `NtfsProbeDummy` on OSFile19; a local user with a profile and an entry in
+  Performance Log Users on OSFile19; a local user with a profile that was deleted
+  afterwards (an orphaned profile) on OSFile22; `C:\NtfsProbeRecreation` on
+  OSFile22; a domain account that was made a member of Performance Log Users on
+  OSFile22 and then deleted in the directory (`net localgroup` still showed it by
+  its cached name); a scheduled task `NtfsMatrix-dummy` on OSFile25;
+  `C:\NtfsProbeModules` on OSWin11E; and a disabled directory user
+  `NtfsProbeDummy`. `Verify` counted every item (on OSFile19 `probe users=2 probe
+  profiles=1 probe group members=1`, on OSFile22 `probe profiles=1 probe group
+  members=1`, and so on), and the verdict expression of `Run-MatrixSequence.ps1`,
+  read from the script with the parser and not copied, gave DIRTY. `Repair`
+  removed every item, and a second `Verify` gave CLEAN. Not tried: a profile that
+  stays loaded (the retries of `Repair` never needed a second attempt), and an
+  entry that `net localgroup` shows as a bare SID.
 - Decision 24 is the agent's decision under the maintainer's delegation and stays
   `proposed`. So do Decisions 22 and 23.
 
diff --git a/Tests/Lab/README.md b/Tests/Lab/README.md
index 8997e2b..593bad1 100644
--- a/Tests/Lab/README.md
+++ b/Tests/Lab/README.md
@@ -208,9 +208,11 @@ the host:
   `Get-NTFSEffectiveAccess` of each module under test returns. It showed the
   state that the controller avoids with a new name for the account of case 3.
 - `Export-CellTimeline.ps1` reads the sequence and run logs of controller cells
-  and writes one row for every cell, edition, and role: the module, the account
-  and its relative ID, the times of the removal of the previous fixture, of the creation
-  of the accounts, and of the Admin role, and the three effective-access tests.
+  and writes one row for every cell and edition in which the Admin role ran: the
+  module, the account and its relative ID, whether the previous cell had the same
+  name and the same account, the times of the removal of the previous fixture, of
+  the creation of the accounts, and of the Admin role, and the three
+  effective-access tests of case 3.
 - `Test-StaleAuthzModel.ps1` replays such a timeline against the model of the
   failures of the effective-access tests (an authorization manager that answers
   for an account name from its first request, for some minutes, also after the