# Surveillance Architecture Surveillance architecture is an integrated arrangement of collection, persistence, identity, transport, storage, analysis, control, and concealment capabilities capable of sustaining observation over time. ## Use in this archive The term is broader than a single implant. It can include endpoint agents, privileged helpers, account access, network mediation, cloud control planes, telemetry processing, recovery-channel control, and institutional or commercial infrastructure. Within [[InstallESD.dmg]], the vault owner proposes that unusually permissive transition privileges, readable control surfaces, weak verification boundaries, and inherited installer authority were purposefully left compatible with surveillance. Public research establishes important capability classes, but the current archive does not independently establish deliberate design, deployment, operator, or intent. ## Archival rule Separate architectural capability from observed artifact, observed artifact from unauthorized operation, and unauthorized operation from actor attribution. ## Relationships [[Surveillance Capability]] · [[Signals Intelligence]] · [[Foundational Persistence]] · [[Authorization Gap]] · [[Observability Asymmetry]] · [[InstallESD.dmg]]. ## Source [[InstallESD.dmg#Owner-supplied account and interpretation|InstallESD.dmg — owner-supplied interpretation]].