一句话：提出依赖感知 OTA 编排框架，通过图调度融合依赖、安全、更新敏感性与治理，提升 SDV 更新成功率与效率。
随着汽车产业转向软件定义汽车（SDV），OTA 更新成为关键能力，但传统更新机制难以弥合静态法规合规与现代车辆架构动态运行复杂性之间的差距，影响更新成功率。本文提出依赖感知的 OTA 编排框架，将依赖、安全、更新敏感性与治理四个运行维度融入基于图的调度逻辑，并与 AUTOSAR、UNECE R155/R156、ISO 26262 等工业标准对齐，以管理多 ECU 环境中的软件组件。评估以代表当前工业实践的常规顺序基线为对照，围绕三个研究问题展开：提升更新成功率、通过优化调度改善执行时间与更新请求效率、以及在严格安全要求与多样更新敏感性约束下维持系统整体完整性。结果表明，该框架能为生产级 SDV 提供兼顾功能安全与法规要求的高完整性 OTA 方案。
As the automotive industry transitions toward Software-Defined Vehicle (SDV), Over-the-Air (OTA) updates have become a critical capability. However, conventional update mechanisms often struggle to ensure update success due to the gap between static regulatory compliance and the dynamic operational complexities of modern vehicle architectures. This paper proposes a dependency-aware OTA orchestration framework that addresses these challenges by integrating four operational dimensions—Dependency, Safety, Update Sensitivity, and Governance—into a graph-based scheduling logic. Designed to align with major industrial standards such as AUTOSAR, UNECE R155/R156, and ISO 26262, our framework provides a standardized yet flexible foundation for managing software components across multiple Electronic Control Units (ECUs) environments. Evaluated against a Conventional Sequential Baseline that represents current industrial practices, the proposed approach demonstrates superior performance across three Research Questions (RQs): effectiveness in improving update success rates, efficiency in execution time and update requests through optimized scheduling, and feasibility in maintaining system-wide integrity by successfully reconciling stringent safety requirements and diverse update sensitivity constraints. These findings offer actionable insights for implementing high-integrity OTA solutions that meet both functional safety and legal requirements in production-grade SDV environments.