A managed Mac with a clean scanner result, a genuine notarized tool holding Full Disk Access, and a LaunchAgent your persistence sweep never looked at. Here is what to read on disk when nothing was ever malicious code.