Compound Stressor Gaps in eVTOL Propulsion Battery Qualification

Application platform: eVTOL / Powered-lift propulsion batteries Last verified: 4 September 2026 Prior coverage: This card extends the eVTOL / Powered-Lift Evidence-Boundary Map (Issue #12) and the eVTOL/eCOTL Propulsion Battery Qualification Standards Map (Issue #5). Those cards map the full standards landscape and evidence boundaries across parameter classes. This card addresses one question: which consequential stressor combinations does the mission present that no governing document tests in combination?

Governing documents relevant to compound stressor assessment:

Why compound stressors matter here

Propagation behavior, thermal-runaway severity, and containment margin all depend on the state of the pack at the moment of initiation, and that state is not one variable. It is aging history, thermal conditioning, SOC, and the duty cycle the pack has just completed, acting together. Testing each independently characterizes each. It does not characterize the combination, and the combinations are what the mission actually produces.

What the DVP has to establish, then, is whether a governing document requires the combination to be characterized, or whether the program defines and defends that test architecture on its own authority.

EASA MOC VTOL.2440 — the strongest published coupling

MOC VTOL.2440 is the strongest published case of a regulator requiring compound stressor characterization for propulsion batteries. Its non-propagation route (§7(a)(3)(ii)) requires cell-level characterization across four variables treated as interacting:

• Trigger method
• SOC
• Internal-short or heater position relative to the venting mechanism
• Heating rate (5°C/min to 20°C/min)

The worst-case combination from that characterization then initiates the selected cell in a representative type-design battery installation, stabilized at 55°C or the maximum operating high temperature, whichever is higher. The CSFL containment route (§7(b)(2)) carries the same four-variable characterization into worst-case selection, then requires thermal runaway in at least 20% of the propulsion battery's cells. Single-cell non-propagation and managed multi-cell outcome are distinct evidence claims and belong in separate DVP entries.

The EASA comment-response document states the rationale directly: evaluating these variables independently is insufficient because the worst trigger method can change with SOC, initiation position, and heating rate. EASA told Rolls-Royce that unmodified DO-311A tests are not acceptable for non-propagation evidence, because they do not evaluate different SOCs, heater positions, heating rates, or initiating-cell positions.

That is genuine coupling, and it is bounded. The sections below trace where it stops.

DO-311A — fixed conditions, no characterization space

DO-311A §2.4.5.5 is the baseline against which EASA's additions are measured. Working from published secondary analyses of the paywalled standard (per CAAC CTSO-C179b comparison, a regulatory source reproducing DO-311A test structure, and Bingham et al., 2022, a peer-reviewed protocol description from aircraft development), the test charges all cells to 100% SOC and forces the entire battery into thermal runaway via overcharge or overheating. The principal method heats at 5°C/min. The Appendix C alternate stabilizes at maximum operating temperature and heats cell pairs at regulator-agreed worst locations. CAAC records the original DO-311A post-initiation monitoring period as 16 hours.

DO-311A is not unconditioned. It couples high SOC with an induced thermal event, which is itself a compound condition. But it does not characterize the space. There is no variation in SOC, trigger method, heater position, or heating rate, so the test returns a single point in a four-dimensional design space rather than a bound on it. EASA's matrix exists because that single point does not bound the propagation behavior of large propulsion batteries.

FAA — outcome requirements, no public compound matrix

FAA AC 21.17-4 (18 July 2025) sets PL.2440 as an outcome requirement: means to isolate and mitigate hazards from in-operation powerplant fire or overheat. It does not specify an initiating-cell method, SOC, heating rate, aging condition, number of cells entering runaway, or post-trigger observation period.

The Joby JAS4-1 criteria and Archer M001 criteria reproduce this outcome language. When commenters requested explicit battery provisions addressing propagation, crashworthiness, and thermal management, the FAA declined, stating that model-specific safety objectives and MOCs would be developed through the issue-paper process. Both notices note that because no powered-lift consensus standards had been accepted, MOCs would be accepted project by project.

No public applicant MOC or issue paper imposing EASA's four-variable trigger matrix, aging-plus-propagation conditioning, or mission-duty-plus-initiation sequencing was found in FAA docket records reviewed through the research cutoff. That is a public-record finding, not a finding about regulatory substance. The FAA notices say plainly that detailed, tailored MOCs are developed inside the certification process, where they are not published.

For a DVP, the operational difference is one of citability. EASA supplies a compound test structure that can be cited in a test entry. The FAA supplies a safety outcome and a project-specific negotiation, and until that negotiation produces an accepted MOC, the compound test conditions for FAA compliance are program-owned.

The specific compound gaps

Aging/degradation + propagation

EASA: Included in the accepted route, but the aging protocol is applicant-defined. MOC VTOL.2440 §7(a)(3)(i) states that to address worst-case conditions during battery life, tests should also be performed with battery systems that have experienced vibration, thermal cycling, or electrical cycling that could lead to degradation. Articles previously used for DO-160/ED-14 environmental testing or ED-289 aging-cycle testing may be reused if the applicant demonstrates proper aging and degradation. Equivalent accelerated-life articles are permitted. Separate test articles for separate degradation modes are allowed.

The MOC prescribes no cycle count, DOD, C-rate, SOH endpoint, calendar exposure, or minimum degradation percentage. Boeing asked EASA to provide a standardized aging method; EASA partially accepted by adding the ED-289 reference but did not add a numeric baseline. ED-289's detailed aging-profile provisions sit inside the controlled document, so a program that needs to define or justify an aging severity for EASA compliance should pull ED-289 directly.

The word "should" in MOC-3 is not "shall," and the distinction matters for how a DVP cites it. EASA's comment-response document states that MOCs use "should" because means of compliance are not requirements — an applicant may propose a different solution. EASA nevertheless stated that both non-propagation and containment safety layers are requested, and that unmodified DO-311A tests are not acceptable for the non-propagation purpose.

FAA: No public requirement.

DVP disposition: Under EASA the structural requirement to couple aging with propagation testing exists; the severity of that aging — what degradation looks like, how much of it, and on how many articles — is negotiated with the authority rather than looked up. Under FAA, the coupling itself is program-owned. Either way the DVP defines and defends the aging severity, because no governing document supplies one.

Mission-duty SOC + thermal-runaway initiation

EASA: Not coupled. MOC VTOL.2440 treats SOC as a characterization variable — the applicant determines which SOC produces the worst-case propagation outcome in combination with trigger method, position, and heating rate. EASA notes that lower SOC can leave more material available to support propagation while higher SOC normally produces a more energetic event. The SOC is recorded and selected for worst case.

The MOC does not identify post-takeoff, mid-cruise, approach, or reserve SOC as the required initiation state. It prescribes no mission power pulse, rest period, cooling interval, or regenerative-charge event before the thermal-runaway trigger. Mission-related battery state — aging, thermal limits, SOC, accessible energy relative to in-flight power demand — is addressed in MOC-4 for performance substantiation, and is not fed into the VTOL.2440 trigger protocol.

FAA: No public requirement.

DVP disposition: No governing document addresses whether a cell's thermal-runaway behavior after a 3C+ vertical climb segment differs from its behavior at the same SOC reached by gentle constant-current charge. There is a mechanistic case for thinking it might: high-C-rate discharge produces internal thermal gradients, elevates localized lithium plating risk on the subsequent charge phase, and generates electrolyte decomposition products that a constant-current protocol will not replicate. If the program's failure-mode analysis identifies mission-duty conditioning as a relevant variable, the test definition belongs to the program in both jurisdictions.

Trigger-method dependence

EASA: Explicitly governed as part of the four-variable characterization matrix. The comment-response document confirms that the worst trigger method can change depending on SOC, position, and heating rate. A 2026 peer-reviewed module study found materially different propagation timing, pressure behavior, and explosion hazard under local versus overall heating triggers in a 12-cell pouch module. It is non-governing technical evidence, but it confirms that trigger selection changes the evidentiary meaning of the result.

DO-311A: Fixed trigger (overcharge or overheating), per the secondary protocol descriptions cited above. No multi-trigger characterization.

FAA: No public requirement for trigger-method characterization.

DVP disposition: Governed under EASA, program-owned under FAA. A DVP serving both jurisdictions should treat EASA's multi-trigger characterization as the floor.

Gaps summary

Each of the four consequential combinations is program-owned in at least one jurisdiction. The trigger matrix and trigger-method dependence are governed under EASA with no public FAA counterpart; aging severity and mission-duty conditioning are program-owned on both sides of the Atlantic, with EASA supplying the structural requirement for aging but no number to meet.

A dual-jurisdiction DVP therefore cannot be populated from governing documents alone for any of these four. MOC VTOL.2440 is the best available starting structure, and the aging protocol, the mission-duty question, and the whole FAA-side compound matrix are documented program decisions that will have to stand on mechanistic reasoning rather than a citation.