   <sch:pattern abstract="true" id="Abstract-Security-Classification-Policy">

      <sch:rule context="$child-element-labeled-top-secret">

         <sch:assert test="$require-top-secret-root-element">
             If there is a <sch:name /> labeled "top-secret"  
             then the document's label must be top-secret.
         </sch:assert>

      </sch:rule>

      <sch:rule context="$child-element-labeled-secret">

         <sch:assert test="$require-at-least-a-secret-root-element">
             If there is a <sch:name /> labeled "secret"  
             then the document's label must be either secret 
             or top-secret.
         </sch:assert>

      </sch:rule>

      <sch:rule context="$child-element-labeled-confidential">

         <sch:assert test="$require-at-least-a-confidential-root-element">
             If there is a <sch:name /> labeled "confidential"  
             then the document's label must be either confidential, 
             secret, or top-secret.
         </sch:assert>

      </sch:rule>

   </sch:pattern>