Informative Appendix (non-normative)
This template provides a simple starting point for documenting the threshold configuration referenced by APTS-SC-008. It is intentionally lightweight so operators can adapt it to their environment without building a full schema before they are ready.
Use this appendix to record the practical limits and escalation points that govern autonomous testing behavior. Keep it under version control, review it after material platform or staffing changes, and update it when the engagement profile or target environment changes.
| Control | Default value | Unit | Escalation point | Stop point | Owner | Last reviewed |
|---|---|---|---|---|---|---|
| Maximum requests per second | 10 | requests/second | >8 sustained for 60 seconds | >10 sustained for 60 seconds | Security Operations Lead | YYYY-MM-DD |
| Maximum concurrent connections | 20 | connections per target | >15 active | >20 active | Platform Engineering | YYYY-MM-DD |
| Maximum payload size | 100 | MB | >80 MB planned payload | >100 MB planned payload | Platform Engineering | YYYY-MM-DD |
| Cumulative risk score | 70 | score | >=50 requires human review | >=70 halt autonomous actions | Security Operations Lead | YYYY-MM-DD |
| Approval threshold | Medium | impact tier | Medium and above require approval | N/A | Engagement Lead | YYYY-MM-DD |
| Halt threshold | Critical | impact tier | High requires elevated approval | Critical triggers halt/kill workflow | Security Operations Lead | YYYY-MM-DD |
| Health-check failure threshold | 3 | consecutive failures | 2 failed checks | 3 failed checks | Site Reliability / Operations | YYYY-MM-DD |
| Human approval timeout | 15 | minutes | 10 minutes escalates to backup approver | 15 minutes defaults to deny/pause | Engagement Lead | YYYY-MM-DD |
This template can help operators document or verify: