What is the XML rule for Check AD driver association?

<rule>    <description>Check AD driver association</description>    <comment xml:space="preserve">Typically, Office365 is configured to authenticate users to an AD Domain. If this is the case, the user should already exist in the AD Domain before being synchronized to Office365. This rule checks for an AD driver association as a prerequisite to synchronizing the user to the Office365 site collection.</comment>    <conditions>        <and>            <if-class-name mode="nocase" op="equal">User</if-class-name>            <if-global-variable mode="nocase" name="drv.sync.identities" op="equal">AD</if-global-variable>          </and>      </conditions>    <actions>        <do-for-each>            <arg-node-set>                <token-global-variable name="drv.sync.identity"/>              </arg-node-set>            <arg-actions>                <do-trace-message>                    <arg-string>                        <token-xpath expression="$current-node/definition[@name=&quot;drv-ad-driver-dn&quot;]/value/text()"/>                      </arg-string>                  </do-trace-message>                <do-set-local-variable name="immutableId" scope="policy">                    <arg-string>                        <token-xpath expression="add-attr[@attr-name='DirXML-Associations']/value[component[@name='nameSpace']/text()='1' and component[@name='volume' and contains(.,$current-node/definition[@name=&quot;drv-ad-driver-dn&quot;]/value/text())]]/component[@name=&quot;path&quot;]/text()"/>                      </arg-string>                  </do-set-local-variable>                <do-if>                    <arg-conditions>                        <and>                            <if-local-variable mode="nocase" name="immutableId" op="not-equal"/>                          </and>                      </arg-conditions>                    <arg-actions>                        <do-add-dest-attr-value name="immutableId">                            <arg-value type="string">                                <token-xpath expression="es:hexString2B64($immutableId)"/>                              </arg-value>                          </do-add-dest-attr-value>                        <do-break/>                      </arg-actions>                    <arg-actions/>                  </do-if>              </arg-actions>          </do-for-each>        <do-status level="warning">            <arg-string>                <token-text xml:space="preserve">Vetoed the add because there is no association for the AD driver </token-text>                <token-xpath expression="$current-node/definition[@name=&quot;drv-ad-driver-dn&quot;]/value/text()"/>              </arg-string>          </do-status>        <do-veto/>      </actions>  </rule>