<?xml version="1.0" encoding="UTF-8"?>
<!--
  PR23:WEB-003 — this path returned the SPA's index.html (200, text/html)
  before this file existed, because nothing at marketing/public/sitemap.xml
  shadowed Cloudflare's SPA fallback for the same URL. A real static file
  here is served as-is (asset serving wins over the not_found_handling
  fallback), so this is content-typed as XML with no infra change needed.

  Lists the marketing site's own real routes only — the app
  (app.getworkscited.com) and the three-view auth flow are a separate
  origin/product surface, not this sitemap's job. `/privacy/extension`
  is deliberately excluded: it renders the identical document `/privacy`
  does (see MarketingRoot.jsx), so listing both would be a near-duplicate
  URL — the same reasoning robots.txt already states for indexing "the
  Privacy Policy" (singular).
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://getworkscited.com/</loc></url>
  <url><loc>https://getworkscited.com/how-it-works</loc></url>
  <url><loc>https://getworkscited.com/why-workscited</loc></url>
  <url><loc>https://getworkscited.com/faq</loc></url>
  <url><loc>https://getworkscited.com/attributions</loc></url>
  <url><loc>https://getworkscited.com/privacy</loc></url>
  <url><loc>https://getworkscited.com/terms</loc></url>
</urlset>
