<?xml version="1.0" encoding="UTF-8"?>
<!--
  Two URLs, and that is the whole public site. Everything else this origin serves is either an
  API route, an asset, or one of the four partner screens that carry noindex and are worthless
  without a session — listing any of them here would contradict the pages themselves, and a
  sitemap that argues with its own <meta robots> is a sitemap a crawler learns to distrust.

  No <lastmod>, <changefreq> or <priority>. Google ignores the last two outright, and lastmod is
  a promise this repo cannot keep: there is no build step to stamp it, so a hand-written date
  starts rotting the day after it is typed and a crawler that catches it lying discounts the
  field everywhere on the site. Absent is more truthful than stale.

  Lives in Design/ because that directory is the web root — server.mjs roots its static handler
  there and vercel.json rewrites onto it.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://xpose.sibermate.com/</loc>
  </url>
  <url>
    <loc>https://xpose.sibermate.com/partner</loc>
  </url>
</urlset>
