All the contracts in the White Lotus are immutable and cannot be changed after deployment.
Lotus.sol includes an option to disable rebalances in case of any bugs related to the accounting logic or Trader Joe's composability.
If bugs occur, rebalances will be disabled, and the liquidity will remain locked forever in the Joe Liquidity Book with the last bin parameters set before the bug occurred. No further rebalances would be possible.
Also includes an option to change the vault where staking rewards go to.
LotusLend.sol has an initial supply limit of 20 ETH until the contracts are battle-tested in production. There is an admin key that can raise this limit, limits will be raised shortly after launch as mechanics are tested.
There is also a key for the MUSE DAO multi sig to emergency withdraw funds in case required.