I found out it's always safer to resolve against base-uri(.) than @xml:base, we never know how the grammar will evolve.