The toolkit loads a custom forensic ramdisk. This temporary OS runs entirely in RAM and does not modify the device’s actual iOS installation.