<?xml version="1.0" encoding="UTF-8"?>
<!--
  Lodestone Systems, sitemap.

  Hand written, on purpose. @astrojs/sitemap is the idiomatic route, but it was
  measured before it was chosen: it adds 7 entries to package-lock.json for a site
  with two URLs. See the W2-M report. WEBSITE_BLUEPRINT.md section 7.2 treats every
  npm dependency as supply chain surface on a live trading workstation, and two
  static lines cost nothing to review.

  IF THIS LIST EVER STOPS BEING TRIVIAL, DELETE THIS FILE AND ADD THE INTEGRATION.
  A hand written sitemap is only defensible while a human can hold every route in
  their head. The moment a third page exists that a person has to remember to add
  here, the generator is correct and this file is a trap.

  Kept in step with src/pages/: index.astro and privacy.astro. Nothing else is a
  page. /api/contact is a POST endpoint, not a document, and is deliberately absent.

  No lastmod, no changefreq, no priority. All three are optional, Google ignores the
  last two, and lastmod would be an invented date that goes stale silently.

  TRAILING SLASHES ARE NOT COSMETIC HERE. Astro builds directory-style output, so
  /privacy is privacy/index.html and the canonical tag it emits reads
  https://lodestonesystems.io/privacy/ with the slash. Both loc values below are
  copied from the canonical tags in the built HTML, character for character. A
  sitemap that disagrees with the canonical it points at is a self-inflicted
  duplicate-content signal. Re-check these if build.format ever changes.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://lodestonesystems.io/</loc>
  </url>
  <url>
    <loc>https://lodestonesystems.io/privacy/</loc>
  </url>
</urlset>
