Requirements Checklist (023)

Created: 2026-01-03 Feature: spec.md

endpointSecurityPolicy.restore is changed to enabled in config/tenantpilot.php.
Restore preview validates template existence and reports missing/ambiguous templates.
Restore execution blocks on missing/ambiguous templates with a clear, actionable error message.
Settings instances are validated against resolved template definitions before execution.
Template mapping strategy is defined for cross-tenant differences (if required) and is tested.
Restore create + update paths for Endpoint Security policies are covered by automated tests.
Assignments mapping/application for Endpoint Security policies are covered by automated tests.
Audit log entries exist for restore execution attempts (success and failure).