A cross-domain OTA service quality governance framework based on policy layering and service level objectives (SLOs)

OTA updates used in aviation, rail and wind-power systems must meet different delay and availability limits, which makes a single update rule hard to apply. This study proposes an SLO-based method that gives security patches, feature upgrades and configuration changes their own timing targets and applies slowdown or pause steps when these targets are at risk. The method was tested for 90 days on three independent systems, with 3,462 update jobs collected. Under the proposed rules, the overall SLO failure rate fell from 7.4% to 1.2%, and peak CPU and memory use fell by 22.9%. These results show that simple SLO checks can coordinate update timing across several critical sectors while reducing resource peaks. The study used simulated avionics and rail setups and one OTA design, so further tests with real fleets and longer time windows are needed.