<?xml version="1.0" encoding="UTF-8"?>
<!--
  app.crystalfunds.com is an Auth0-gated SPA, so this lists ONLY the routes that
  declare the `public` audience in src/routes/routeMeta.ts. Everything else
  redirects to Auth0 before it renders, and a gated URL in a sitemap is indexed
  as a login wall or dropped, while still publishing internal route structure.
  Rationale and the rejected build-time generator: ADR-076.

  Deliberately absent, though also public: /callback, /logout,
  /Account/Activate, /Account/Registration/DifferentEmail and the four
  /Warning/* interstitials (handlers and error pages, not content), plus the
  /Proposals/Viewer* share landings, which are per-recipient private links.
  Insights, Press and Contact-us are gated HERE; their public equivalents are on
  www.crystalfunds.com and are in that site's sitemap.xml.

  LANDMINE: public/ lands under releases/<tag>/ (base=/releases/<id>/). This
  file reaches the storage root only via the "Mirror public-root files" step in
  portal-tag.yml / portal-hotfix.yml / portal-staging.yml, which iterates a
  hardcoded list. src/routes/publicSitemap.test.ts guards both that list and the
  route set below.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://app.crystalfunds.com/Account/Login</loc>
  </url>
  <url>
    <loc>https://app.crystalfunds.com/Account/Registration</loc>
  </url>
</urlset>
