The native JDK XSLT processor is not handling negation inside a predicate correctly. For example the XSLT match predicate:
alg:*[not(parent::md:Extensions)]
Incorrectly matches the EntityDescriptor of any input SAML Metadata XML.
I will clean this up into a generic PoC to perhaps submit to Oracle.