Lotor is load-bearing memory for AI agents. Every session leaves a signed, hash-chained receipt on your machine, and the record is the agent: swap the model, the memory survives. Lose the record, and no model can bring it back. High-risk actions stop for a passphrase only you know. The key is never on disk. You hold the record, not the vendor. The agent can act, but it cannot sign and is witnessed by a triad ledger model.