Sort:  

No, it's on-chain. An escrow account is created on behalf of the author. When the author shows up to claim, keys are handed over.

Ok, got it. That's solves the audit then. Nice.