Today I wrote code to process the IANA Language Subtag Registry into an almighty regex that can validate @xml:lang values, and then built that into the diagnostics. It seems to work well. The regex is the largest I've ever used.