Governance standard for autonomous penetration-testing platforms defining scope limits, safety controls, human oversight, auditing, and reporting requirements for secure responsible deployment.