Locked contract means that there are no access keys allowing the contract code to be re-deployed.

In general case, the code can be re-deployed by:

a transaction with a deploy-code action
the contract itself can implement a function call that will trigger deploy-code action

To re-deploy the code with a transaction, the transaction has to be signed with a full-access key. If there is no such key on the contract, there is no way to re-deploy the code unless there is a dedicated support in the contract code itself, and thus we mark such contracts as locked.

If there is at least one full-access key registered on the contract account, the contract is not locked.

Account: @930e5b6995d7664982dbd5d35d8698a444e4a7b8958cf24ff625d0e678b7b6dd