本文件描述了应用程序安全控制（ASC）规定的所需活动被预测应用程序安全原理（PASR）取代时的最低要求。映射到PASR的ASC定义了后续应用程序的预期信任级别。在预期信任水平的情况下，始终存在一个原始应用程序，其中项目团队执行指定ASC的活动，以达到实际的信任水平。 本文件定义的预测应用程序安全原理（PASR）的使用适用于具有定义的应用程序规范框架（ANF）和具有实际信任级别的原始应用程序的项目团队。 与多个组件的聚合或开发人员与其他应用程序相关的历史相关的预测不在本文档的范围内。

This document describes the minimum requirements when the required activities specified by an Application Security Control (ASC) are replaced with a Prediction Application Security Rationale (PASR). The ASC mapped to a PASR define the Expected Level of Trust for a subsequent application. In the context of an Expected Level of Trust, there is always an original application where the project team performed the activities of the indicated ASC to achieve an Actual Level of Trust. The use of Prediction Application Security Rationales (PASRs), defined by this document, is applicable to project teams which have a defined Application Normative Framework (ANF) and an original application with an Actual Level of Trust. Predictions relative to aggregation of multiple components or the history of the developer in relation to other applications is outside the scope of this document.