Cause:
The machines were booted to automation using x86 WINPE.
This resulted in them being initally added to the x86 filter groups on the NS
Resolution:
Allowing sufficient time for the machines to submit a basic inventory after booting to production, and the resource membership update to run before deploying agent plug-in policies resolved the issue.