How it works
A physical product is sold outright, and part of what makes it valuable is held on the manufacturer’s side of a connection: in software the manufacturer writes, an account the manufacturer administers, or a network the manufacturer authorises.
Because that dependency persists after the sale, the manufacturer’s leverage over the product does not end at delivery. It can add capability, and it can remove it. It can permit transfer to a new owner, or decline to. It can admit the product to a service, or exclude it.
Remote product mutation — changing a sold product in place, through a channel the owner cannot decline or reverse — is the mechanism by which this operates. It is treated here as part of this pattern rather than as a separate entry.
Recognition checklist
What to look for
Capability is a setting, not a property
Capacity, speed or features are software states the manufacturer sets, on hardware the customer already owns.
Updates cannot be declined or reversed
There is no supported way to refuse a change or return to the previous state, and refusing may cost coverage.
Resale needs permission
What survives a change of owner — features, benefits, service eligibility — is decided by the manufacturer rather than by the sale.
Access can be revoked
The product can be excluded from a network or service it was sold with, sometimes irreversibly.
The account is the interface
Practical control of the object runs through an account the manufacturer administers, not through the title the owner holds.
Type specimen
Tesla — one of the clearest mass-market automotive cases.
Battery capacity has been software-limited since the Model S 40. Tesla’s own manual states that reverting to a previous software version is not possible, and warranty coverage is conditioned on accepting updates. Voltage caps applied over the air to delivered cars produced a judgment in Norway’s Supreme Court in April 2026. Purchased driver-assistance software was removed from a used car after Tesla’s own auction and restored only under press attention. Salvage vehicles lose Supercharger access and third-party fast charging irrevocably. The same channel delivered Sentry Mode, Dog Mode and a power increase free to cars already sold, and installs recall remedies fleet-wide overnight.
Read the full Tesla assessment → — CHI 68 / CVI 81 / CFS +13.
Digitally Contingent Ownership is a newly adopted Lexicon entry. Company assignments are recorded as CHI assessments test for it.
Important distinction
What this pattern does not claim.
It does not claim that legal title has been converted into a licence. Owners hold title. What is contingent is the functional content of what they own.
It does not claim that any one company was definitively the first mass-market product with this architecture, that all of a product’s functionality is revocable, that every remote change is hostile, or that software dependence necessarily produces net customer harm. Products under this architecture frequently get better after purchase, and some of the strongest post-purchase value in consumer technology arrives this way.
The distinction from Access Downgrading is scope. Access Downgrading names a single act of withdrawal. This names the standing architecture that makes such acts available — and that also makes free post-purchase improvement available. Assessing it means weighing both directions, not assuming one.