Given an XSLT 2.0 stylesheet, S, and two schemas, D_in and D_out, the
tool is able to check statically that all output of S at runtime is
valid according to D_out assuming that the input is valid according to
D_in. Additionally, the tool produces a flow graph of S. Schemas are
written in either DTD, XML Schema, or Restricted RELAX NG.
A research paper describing the analysis is also available from the web
site.

--
Anders Moeller
amoeller@xxxxxxxx
http://www.brics.dk/~amoeller