diff --git a/.github/workflows/build-accesscontrol.yml b/.github/workflows/build-accesscontrol.yml
index 5840522e7f9b..4b044f1722c5 100644
--- a/.github/workflows/build-accesscontrol.yml
+++ b/.github/workflows/build-accesscontrol.yml
@@ -78,7 +78,10 @@ jobs:
           # BTrees, persistent, ...) have no riscv64 wheel on public PyPI.
           CIBW_ENVIRONMENT: PIP_EXTRA_INDEX_URL=https://pypi.riseproject.dev/simple/
           CIBW_TEST_EXTRAS: test
-          CIBW_TEST_ENVIRONMENT: ZOPE_INTERFACE_STRICT_IRO=1
+          # RestrictedPython 9.0 drops builtins (e.g. sorted) the 7.x test-suite
+          # still exercises (testZopeGuards); cap it for the test stage only.
+          CIBW_BEFORE_TEST: echo 'RestrictedPython<9' > /tmp/test-constraints.txt
+          CIBW_TEST_ENVIRONMENT: ZOPE_INTERFACE_STRICT_IRO=1 PIP_CONSTRAINT=/tmp/test-constraints.txt
           # Upstream's two test steps: with and without the C extension.
           CIBW_TEST_COMMAND: >-
             PURE_PYTHON=0 python -m zope.testrunner --test-path={package}/src &&
diff --git a/docs/packages/accesscontrol.yaml b/docs/packages/accesscontrol.yaml
index dc8d9ba20909..7aa79ae3f400 100644
--- a/docs/packages/accesscontrol.yaml
+++ b/docs/packages/accesscontrol.yaml
@@ -3,3 +3,5 @@ source-code: https://github.com/zopefoundation/AccessControl
 license: ZPL-2.1
 versions:
 - version: '7.5'
+- version: '7.6'
+- version: '7.7'