# Tasks: Enrollment Configuration Subtypes (027)

**Branch**: `feat/027-enrollment-config-subtypes`  
**Date**: 2026-01-04  
**Input**: [spec.md](./spec.md), [plan.md](./plan.md)

## Phase 1: Setup
- [x] T001 Create spec/plan/tasks and checklist.

## Phase 2: Research & Design
- [ ] T002 Confirm `@odata.type` for each subtype and whether Graph supports assignments.
- [ ] T003 Decide restore modes and risk levels.

## Phase 3: Tests (TDD)
- [x] T004 Add sync tests ensuring each subtype is classified correctly.
- [x] T005 Add snapshot capture test for at least one subtype.
- [x] T006 Add restore preview test ensuring preview-only behavior.

## Phase 4: Implementation
- [x] T007 Add new types to `config/tenantpilot.php`.
- [x] T008 Add contracts in `config/graph_contracts.php` (resource + type families).
- [x] T009 Update `PolicySyncService` enrollment classification logic.
- [x] T010 Add normalizer for readable UI output (key fields per subtype).
- [x] T013 Hydrate notification templates for enrollment notifications.

## Phase 5: Verification
- [x] T011 Run targeted tests.
- [x] T012 Run Pint (`./vendor/bin/pint --dirty`).