<?xml version="1.0" encoding="UTF-8"?>
<!--
  FloraPass sitemap. Submitted to Google Search Console and Bing Webmaster Tools at go-live (see
  docs/DEPLOYMENT.md) and discoverable from robots.txt.

  Only the six PUBLIC pages are listed. A sitemap is a statement that these URLs are worth
  indexing, so an authenticated route in here would be a claim that an empty shell is content.
  SitemapRoutesTests asserts every <loc> below resolves to a real @page route in FloraPass.Web and
  that none of them is [Authorize]-guarded, so a renamed route fails the build instead of silently
  becoming a 404 that Search Console reports weeks later.

  Absolute URLs on the apex, because the sitemap protocol requires absolute locations and D-06 makes
  florapass.eu the single production origin (www redirects to it permanently).

  No <lastmod>, <changefreq> or <priority>, deliberately. Google ignores the latter two outright and
  distrusts lastmod unless it is accurate — and nothing here would keep a hand-written date honest,
  so it would rot into a lie on the first content edit. Omitting them is valid and says less that is
  false.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://florapass.eu/</loc>
  </url>
  <url>
    <loc>https://florapass.eu/for-partners</loc>
  </url>
  <url>
    <loc>https://florapass.eu/verify</loc>
  </url>
  <url>
    <loc>https://florapass.eu/support</loc>
  </url>
  <url>
    <loc>https://florapass.eu/privacy</loc>
  </url>
  <url>
    <loc>https://florapass.eu/terms</loc>
  </url>
</urlset>
