The new framework for regulated token eligibility and recovery requires new deployments rather than in-place upgrades of existing 2.x identities, according to the project's changelog.