# orlop

> orlop is a multi-tenant, zero-trust file plane for agent sandboxes. Each agent gets its own durable, auto-expanding POSIX disk mounted over FUSE; the bytes live in a remote content-addressed chunk store and the agent never sees a storage credential.

## Overview
- [What is orlop?](https://orlop.dev/what-is-orlop/)
- [Frequently asked questions](https://orlop.dev/faq/)

## Design & reference
- [Standalone quickstart (single node)](https://orlop.dev/reference/standalone-quickstart/): Run the whole stack on one machine and give an agent a durable disk, with no external control plane: Postgres, the control plane (CA + allocation), the…
- [Orlop as the Substrate for Agent Memory](https://orlop.dev/reference/agent-memory/): An agent's "memory" is everything it needs to carry across turns, sessions, and machines: scratch files, tool outputs, downloaded datasets, model weights…
- [Design: Cross-Agent Portable Disk](https://orlop.dev/reference/design/): Orlop gives agents and users a plain, writable filesystem that follows them across machines.
- [Orlop Data Plane — Local-Feel Filesystem Over WAN](https://orlop.dev/reference/design-data-plane/): This doc covers the data plane between orlop (Rust client, FUSE) and orlop-server (Go, per-tenant data plane). The control plane (orlop-control: auth…
- [Hosted Auth: mTLS over public HTTPS](https://orlop.dev/reference/design-auth/): Status: design (2026-04-29). Supersedes an earlier Tailscale-based architecture.
- [Control Plane](https://orlop.dev/reference/control-plane/): The hosted control plane handles human login, short-lived bearer credentials, agent enrollment, and tenant CA signing. The data plane remains the…
- [Control-plane runbook](https://orlop.dev/reference/control-plane-runbook/): Operator workflows for the orlop control plane. The CA design is in design-auth.md.
- [Audit + Observability — audit.log and /metrics](https://orlop.dev/reference/audit-events/): The Orlop data plane writes one JSONL audit event per FUSE op, every chunk or manifest RPC, every lease lifecycle transition, and every GC sweep. orlop…

## Source
- [GitHub repository](https://github.com/liu1700/orlop)