<?xml version="1.0" encoding="UTF-8"?>
<!--
  yey.boats sitemap.

  Every <loc> here must be a URL an anonymous visitor gets a 200 HTML page from.
  apps/front-shell/src/seo.test.ts enforces that against the real route sources
  (src/routes.tsx and deploy/cloud/routes.yaml), so adding a public route
  without adding it here — or listing a gated one by mistake — fails the suite.

  No <lastmod>: a hand-edited date rots the moment someone ships a page without
  touching this file, and Google discards lastmod it has learned not to trust.
  Omitting it is better than lying.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <!-- Landing page (front-shell, S3 origin). -->
  <url>
    <loc>https://yey.boats/</loc>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>

  <!-- Public instruments gallery. Linked from the landing hero CTA.
       /instruments/builder below it is ProtectedRoute-gated and stays out. -->
  <url>
    <loc>https://yey.boats/instruments</loc>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- Canonical architecture site (application-hosted, EC2 origin via /sites/). -->
  <url>
    <loc>https://yey.boats/sites/architecture</loc>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
</urlset>
