<?xml version="1.0" encoding="UTF-8"?>
<!--
  The addresses a stranger can open and read. Four of them.

  Everything else this app answers on is deliberately absent:

  - `/` is a redirect, not a page. It renders nothing of its own - signed out
    it replaces itself with /home, signed in with /app/decode (see
    src/app/router.tsx) - so listing it would ask a crawler to index a
    destination that is already listed below, and Search Console would file
    the root under "Page with redirect" either way. Nothing is lost by
    leaving it out: it is the origin every external link points at, so it is
    found without help.
  - `/auth` is a control rather than a document. There is nothing on it to
    read, and it refuses to be shown to somebody who is already signed in.
  - `/app/*` is behind the session guard. A crawler that followed one would
    be redirected to /auth and would index the sign-in screen under the lab's
    URL.
  - `/dev/health` and `/dev/kitchen-sink` are instruments for whoever is
    building this.
  - `/app/explain`, `/app/playground` and the eight lab paths under it exist
    only to forward somebody's bookmark to the current name.

  There is no <lastmod>. It is optional, Google honours it only where it
  finds it consistently accurate, and a date typed in by hand is accurate on
  the day it is typed and false after the next edit to the page it claims to
  describe. <changefreq> and <priority> are ignored by every major crawler
  and are not here either.

  src/app/sitemap.test.ts keeps this in step with the router: every path
  below has to be one the router actually declares, and none of them may be
  guarded or dev-only.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://fisik.app/home</loc>
  </url>
  <url>
    <loc>https://fisik.app/privacy</loc>
  </url>
  <url>
    <loc>https://fisik.app/terms</loc>
  </url>
  <url>
    <loc>https://fisik.app/cookies</loc>
  </url>
</urlset>
