No proxy, no admin path, no recovery. That is the strength of the design and its sharpest edge, including royalties that cannot be withdrawn without the author key.
The seven LPS-1 contracts are not upgradeable. There is no proxy and no administrator who can swap the code. That is why the rules cannot change after the fact, and why a mistake cannot be patched after the fact either.
Key loss is therefore final. The security section of the standard says so for anchoring: lose the author key and no further editions can be anchored. There is a second consequence that a buyer of an edition token should see. RoyaltyRouter pays out by pull-based withdrawal: funds accrue in the contract until the author key withdraws them. If that key is lost, whatever has accrued is permanently stranded. The router has received and withdrawn 0.01 POL to date and holds a zero balance, so the exposure today is small, and the page now states the consequence in its Limitations.
What the design gives in return is a record nobody can quietly edit, including the people who wrote it. For a provenance standard, that trade is the point.
Insight · 2026-09-09 · sourced to the evidence ledger and the chain