Both Update Manager and the agent that carries out commands from the Sun Update Connection use a patch policy of standard. This overrides the policy stored in patchpro.install.types. So any patch not of type standard is pending install until the system is restarted using either init or shutdown. You can see which patches are pending install on a restart on the client be looking at the contents of /var/sadm/disallowed_patch_list.
-Dave