<?xml version="1.0" encoding="UTF-8"?>
<!--
  Obligt (obligt.com) — kept deliberately honest (ADR-0055,
  docs/design/redesign-2026/waves/w12-adr-0055-draft.md).

  The public marketing surface is the landing page plus /privacy and /terms. The landing page is ONE route:
  "/" (frontend/src/routes/LandingPage.tsx),
  a single-page scroller whose in-page sections (#product, #evidence, #pricing, #faq, #vault,
  #integrations, #calendar) are anchors within that one document, not separate crawlable pages —
  search engines dedupe on the path and ignore the fragment, so listing them as distinct <url>
  entries would not add coverage, only padding. Every other route (frontend/src/App.tsx) is an
  authenticated surface excluded via robots.txt: /login, /mfa/verify, /invite/:token, /app/*,
  /portal/*, /platform.

  lastmod is the date this file was last reviewed for accuracy, not an auto-generated build
  timestamp — update it by hand when the landing page's content materially changes.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://obligt.com/terms</loc>
    <lastmod>2026-09-10</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://obligt.com/privacy</loc>
    <lastmod>2026-09-10</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://obligt.com/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
</urlset>
