Updates on the device should indicate whether they are being installed via a policy—and if so, which ones—or not. In the example shown, I can see the necessary updates, but not what happens to them. It would also be helpful to be able to force these updates for this device from this location:
