# Requirements Checklist (023)

**Created**: 2026-01-03
**Feature**: [spec.md](../spec.md)

- [x] `endpointSecurityPolicy.restore` is changed to `enabled` in `config/tenantpilot.php`.
- [x] Restore preview validates template existence and reports missing/ambiguous templates.
- [x] Restore execution blocks on missing/ambiguous templates with a clear, actionable error message.
- [x] Settings instances are validated against resolved template definitions before execution.
- [x] Template mapping strategy is defined for cross-tenant differences (if required) and is tested.
- [x] Restore create + update paths for Endpoint Security policies are covered by automated tests.
- [x] Assignments mapping/application for Endpoint Security policies are covered by automated tests.
- [x] Audit log entries exist for restore execution attempts (success and failure).