<mappings>
          <!--
            Map all SXML assets to one or more SCAS zones.
            Matches are made in the specified order, so add most specific wildcard-rules first...
          -->

          <!-- Map all normal translations to the LowRisk zone... -->
          <add matchtype="translation" zones="LowRisk" />
          <!-- Map all system translations to the LowRisk zone... -->
          <add matchtype="systemtranslation" zones="HighRisk" />
          <!--
                Vipers and macros can have the SXMLSecurityRiskLevel attribute set.
                This allows to quickly map them to security zones based on implied risk, using matchtype="scaslevel".
          -->
          <add matchtype="scaslevel" expression="0" zones="LowRisk" />
          <add matchtype="scaslevel" expression="1" zones="MediumRisk" />
          <add matchtype="scaslevel" expression="2" zones="HighRisk" />
          <!--
            If not already mapped by previous rules, map remaining vipers to MediumRisk
          -->
          <add matchtype="viper" zones="MediumRisk" />
          <!--
            If not already mapped by previous rules, map remaining macros to HighRisk
          -->
          <add matchtype="macro" zones="HighRisk" />
          <!--
            Catch-all: map remaining assets to HighRisk zone...
          -->
          <add matchtype="any" zones="HighRisk" />
        </mappings>