Locked contract means that there are no access keys allowing the contract code to be re-deployed.

In general case, the code can be re-deployed by:

a transaction with a deploy-code action
the contract itself can implement a function call that will trigger deploy-code action

To re-deploy the code with a transaction, the transaction has to be signed with a full-access key. If there is no such key on the contract, there is no way to re-deploy the code unless there is a dedicated support in the contract code itself, and thus we mark such contracts as locked.

If there is at least one full-access key registered on the contract account, the contract is not locked.

Account: @e63f5b9b69e87eb67fba09dbe4c97e8e3377cd532d4c4978177aa1d9040aa026