Privileged key or role with power to change implementations or parameters; centralization risk mitigated with multisigs, timelocks, and on‑chain governance.