A vehicle comprising:
an update gateway; and
a plurality of controller units that are in communication with the update gateway and including at least a subset of controller units dependent on each other such that one controller unit cannot be updated unless the other controller units are also updated;
wherein the update gateway is configured to:
communicate with a remote service over a wireless network, including receiving releases to update machine-readable instructions executing on each of respective controller units of the subset of the controller units;
cause all or none of the releases to be installed to update machine-readable instructions executing on each of the respective controller units of the subset of the controller units; and
send to the server information regarding a status relating to the update of the machine readable instructions.