This looks quite nice, Simon.
I have not yet had a chance to do a detailed inspection, but a question
arises.
Would such techniques fail for (other than OpenSCAP) compliance scanners
that employ ovaldi rather than a strict OVAL implementation?
I have attached an example showing definition re-use with multiple XCCDF
variables.
Regards,
Gary