Which ACID property ensures that once a transaction is committed, it remains even after a system failure?