<?xml version="1.0" encoding="UTF-8"?>
<!--
  The site's three indexable URLs. /terms is deliberately absent: it carries
  <meta name="robots" content="noindex"> and exists only so the app's
  Data & licences panel has something to open, so declaring it here would
  contradict the page's own directive.

  /sources is the reason this file exists at all. It is the GDPR Article 14
  source notice, and its whole purpose is that a restaurant proprietor who was
  never contacted individually can find it. Being indexABLE is not being
  findABLE — permission to index is not a route to discovery — so the notice is
  declared here and linked from the landing screen, and web/scripts/verify-live.mjs
  asserts both against the deployed origin after every deploy.

  lastmod is maintained by hand. It is not a build timestamp: rebuilding the
  site does not change what these documents say, and a date that moves on every
  deploy teaches a crawler to ignore it.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://cibusmaps.com/</loc>
    <lastmod>2026-08-05</lastmod>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://cibusmaps.com/sources</loc>
    <lastmod>2026-08-05</lastmod>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://cibusmaps.com/policy</loc>
    <lastmod>2026-08-05</lastmod>
    <priority>0.8</priority>
  </url>
</urlset>
