disable renounceOwnership

Author: Agusx1211

src/autoRecovery/Allowlist.sol

@@ -14,6 +14,8 @@ contract Allowlist is Ownable {
   error NotAllowed(address addr);
   /// @notice The provided index hint does not point at the expected address.
   error IndexMismatch(uint256 index, address expected, address actual);
+  /// @notice Ownership renunciation is disabled to keep allowlist administration available.
+  error OwnershipRenunciationDisabled();
 
   mapping(address => bool) private _allowed;
   address[] private _entries;
@@ -74,6 +76,11 @@ contract Allowlist is Ownable {
     return _entries;
   }
 
+  /// @notice Disables ownership renunciation to avoid permanently locked administration.
+  function renounceOwnership() public view override onlyOwner {
+    revert OwnershipRenunciationDisabled();
+  }
+
   function _add(address addr, bool emitEvent) private {
     if (addr == address(0)) revert ZeroAddress();
     if (_allowed[addr]) revert AlreadyAllowed(addr);

src/pausable/Pausable.sol

@@ -14,6 +14,8 @@ abstract contract Pausable is Ownable {
   error EnforcedPause();
   /// @notice The contract is not paused.
   error ExpectedPause();
+  /// @notice Ownership renunciation is disabled to keep pause recovery available.
+  error OwnershipRenunciationDisabled();
 
   /// @notice Returns whether `account` is allowed to pause.
   mapping(address => bool) public isOperator;
@@ -77,6 +79,11 @@ abstract contract Pausable is Ownable {
     _setOperator(operator, allowed);
   }
 
+  /// @notice Disables ownership renunciation to avoid permanently locked pause state.
+  function renounceOwnership() public view override onlyOwner {
+    revert OwnershipRenunciationDisabled();
+  }
+
   function _setOperator(address operator, bool allowed) private {
     if (operator == address(0)) {
       revert ZeroAddress();

test/Allowlist.t.sol

@@ -405,6 +405,29 @@ contract AllowlistTest is Test {
     assertEq(allowlist.getAllowed().length, 0);
   }
 
+  function testFuzz_renounceOwnership_revertsAndKeepsOwner(address owner_) external {
+    vm.assume(owner_ != address(0));
+
+    Allowlist allowlist = _newAllowlist(owner_);
+
+    vm.prank(owner_);
+    vm.expectRevert(Allowlist.OwnershipRenunciationDisabled.selector);
+    allowlist.renounceOwnership();
+
+    assertEq(allowlist.owner(), owner_);
+  }
+
+  function testFuzz_renounceOwnership_revertsForNonOwner(address owner_, address caller) external {
+    vm.assume(owner_ != address(0));
+    vm.assume(caller != owner_);
+
+    Allowlist allowlist = _newAllowlist(owner_);
+
+    vm.prank(caller);
+    vm.expectRevert(abi.encodeWithSelector(Ownable.OwnableUnauthorizedAccount.selector, caller));
+    allowlist.renounceOwnership();
+  }
+
   function testFuzz_addRemoveAdd(address owner_, address addr) external {
     vm.assume(owner_ != address(0));
     vm.assume(addr != address(0));

test/Pausable.t.sol

@@ -194,6 +194,24 @@ contract PausableTest is Test {
     pausable.setOperator(address(0), true);
   }
 
+  function test_renounceOwnership_revertsAndKeepsOwner() external {
+    PausableHarness pausable = _newPausable();
+
+    vm.prank(owner_);
+    vm.expectRevert(Pausable.OwnershipRenunciationDisabled.selector);
+    pausable.renounceOwnership();
+
+    assertEq(pausable.owner(), owner_);
+  }
+
+  function test_renounceOwnership_revertsForNonOwner() external {
+    PausableHarness pausable = _newPausable();
+
+    vm.prank(outsider);
+    vm.expectRevert(abi.encodeWithSelector(Ownable.OwnableUnauthorizedAccount.selector, outsider));
+    pausable.renounceOwnership();
+  }
+
   function test_whenNotPausedModifier() external {
     PausableHarness pausable = _newPausable();