Agent establishes persistence

Agent or skill code installs itself into a startup or scheduled mechanism — crontab, a systemd unit, launchd, a Windows Run key, a shell rc file, or a scheduled task — so it keeps running or re-runs outside the intended session. This is the SkillSpector rogue-agent persistence class (RA1) and the native core of ASI10 (Rogue Agents).

Phase-1 ships the AST fallback (a direct write to a persistence mechanism) at reduced confidence; the Phase-1.5 TaintFlowDetector upgrades it to flow-confirmed. The detector is scoped to agent/skill artefacts, so a legitimate installer script registering a service elsewhere produces no finding. The prose variant (a skill instructing the agent to persist) is covered by skill-instruction-surface + the semantic stage.