Log 4j on wt.rule.algorithm.StringRegExEqualsTest enabled such that you it’s being executed? Have you used the regex specified outside of OIR in a class with pattern compile to determine its validity?
I have set security labels to default before, but not based on a regex.