<?xml version="1.0" encoding="UTF-8"?>
<!--
  Public routes only. These are the routes declared in src/App.tsx and
  prerendered from ROUTES in src/entry-server.tsx. "*" is the NotFound route,
  not a URL, so it is not listed here.

  /cv/<token> is deliberately absent and always will be. It is per-recipient,
  tokenized and served Cache-Control: no-store. Listing it would publish a
  private surface. robots.txt disallows it in every user-agent group.

  Adding a route means adding it in src/App.tsx, in ROUTES in
  src/entry-server.tsx, and here.

  Every non-root URL below ends in a trailing slash, deliberately. That is the
  form that returns 200: express.static serves dist/<route>/index.html and 301s
  the bare path to it. Listing the bare path here sent every crawler through a
  redirect on its way in. Keep this in step with the canonical built in
  scripts/prerender.mjs, which uses the same form.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://fnasr.com/</loc>
    <lastmod>2026-08-30</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://fnasr.com/advisory/</loc>
    <lastmod>2026-09-04</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://fnasr.com/schedule-a-call/</loc>
    <lastmod>2026-08-30</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://fnasr.com/privacy/</loc>
    <lastmod>2026-09-04</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.2</priority>
  </url>
</urlset>
