# Plan: Enrollment Configuration Subtypes (027)

**Branch**: `feat/027-enrollment-config-subtypes`  
**Date**: 2026-01-04  
**Input**: [spec.md](./spec.md)

## Approach
1. Confirm Graph details and type-family values for each subtype (`@odata.type`).
2. Add new types to `config/tenantpilot.php` (category “Enrollment Experience”, risk, restore mode).
3. Add contracts to `config/graph_contracts.php`:
   - resource `deviceManagement/deviceEnrollmentConfigurations`
   - type families per subtype
   - assignments endpoints (if supported) or mark as unsupported
4. Update `PolicySyncService` enrollment classification logic to route each item to the correct subtype.
5. Ensure snapshot capture can fetch these items without special casing.
6. Implement restore preview entries; keep execution preview-only until validated.
7. Add targeted Pest tests.

## Decisions / Notes
- All enrollment configuration subtypes should default to `preview-only` restore initially due to enrollment impact risk.