Autonomous Pentest Assurance Standard (APAS)

This document is the Core Standard for APAS. It defines the minimum normative concepts, quality dimensions, claim structure, evidence requirements, and interpretation rules for autonomous pentest assurance. Detailed scoring formulas, evaluator run procedures, profile-specific thresholds, benchmark controls, truth-set construction, framework crosswalks, and safety/dangerous-capability evaluation procedures are out of scope for this Core document and SHALL be defined in companion documents. APAS evaluation as defined here assesses the truthfulness and usability of pentest evidence; it does not by itself certify the safety, containment, or misuse resistance of the candidate system, and APAS certification SHALL NOT be represented as a fitness-for-deployment safety assurance.