Immutability
The upgrade authority today, and the plan to revoke it after audit.
Solana programs can be upgraded by whoever holds the program's upgrade authority. That authority is a conventional Ed25519 key, and it can bypass every check in the program — including post-quantum withdrawal verification.
Until audit, the program keeps an upgrade authority so bugs can be fixed. After an independent audit, the plan is to revoke it: nobody — including the team — could change the code again. The current authority is always visible on the security page.
Revoking the upgrade authority is the last step of the launch checklist.