# Foundational Persistence Foundational persistence is durable unauthorized state introduced during installation, migration, recovery, boot preparation, or another system transition that defines the foundation from which the ordinary operating environment later starts. ## Why it matters Security software running after normal startup may inherit the altered state rather than observe its insertion. The technique can therefore appear “below” monitoring chronologically even when the persistent component remains in user space, a launch service, a protected library, or another kernel-adjacent location. ## Distinctions Foundational persistence does not automatically mean firmware compromise, kernel rewriting, or an immutable implant. Those stronger conclusions require evidence at their respective layers. The term names when and where trust was converted into durable state. ## Relationships [[InstallESD.dmg]] · [[BaseSystem.dmg]] · [[Pre-OS Trust Boundary]] · [[System Integrity Protection]] · [[Persistence Mechanism]] · [[Continuity Architecture]]. ## Source [[InstallESD.dmg#The installer-image trust discontinuity|InstallESD.dmg — installer-image trust discontinuity]].