<?xml version="1.0" encoding="UTF-8"?>
<!--
   sitemap.xml - authoritative URL list for crawlers (Bing, Google, etc.)

  URL contract from IA decision (architecture/IA-2026-04-28.md), expanded
  for the buyer-facing surface inventory under Q-1401 (EPIC-2026-0048
  P0.5 architecture-infra sub-task C).

  --- Allowlist policy --------------------------------------------------
  INCLUDE - Always include (buyer-facing core):
    apex + /products/* + /solutions/* + /docs + /security + /compliance
    + /agent-protocol + /mcp + /portal + /faq + /pricing + /manifesto
    + /writing + /resources index + buyer-facing /resources/*
    essays + /legal/* + /status

  EXCLUDE - NEVER include (utility / preview / demo / internal / gated):
    /brand/*                              - internal brand surfaces (noindex)
    /demo/*                               - federal demo surfaces (RULE #25)
    /resources/x-geoclear-receipt         - A0 takedown redirect stub, noindex
                                            (EPIC-2026-0177 / Q-2605; redirects
                                            to /security; excluded by design)
    /federal                              - gated federal page, noindex
                                            (Q-1618; DEC-087 conditional;
                                            Counterparty engagement via
                                            Request Architecture Brief mailto)
    /api-console                          - internal schema reference; per
                                            EPIC-2026-0068 spec §2 gated
                                            (CG Chief Architect sitemap audit
                                             2026-05-31)
    /security/whitepaper                  - NDA request flow; per
                                            EPIC-2026-0068 spec §2 + CG audit
                                            (gated content; URL works for
                                             approved evaluators)
    /docs/key-transparency-archive        - operator-only archive
    /docs/location-trust                  - internal schema reference
    /products/flood-certs                 - legacy product page (superseded)
    /products/notary                      - legacy redirect to
                                            /products/receipt-engine
                                            (DEC-001 URL stability;
                                             meta-refresh noindex page;
                                             Q-1971 2026-06-02)
    /resources/sample-bundles/{vertical}  - sample bundle sub-pages
                                            (index is sufficient as entry)
    /resources/pov                        - POV bundle landing (utility)
    /vault/payments                       - internal vault path
    /security/offline-verifier            - functional utility tool
                                            (kept un-indexed to focus rank
                                             on /security as the canonical
                                             trust surface)
    /pricing                              - 301 redirect to /#pricing
                                            (homepage anchor is canonical)
    /videos/*                             - utility video pages (noindex
                                            per Q-1379)
    /bulk                                 - bulk address verification tool
                                            (operational utility, RULE #7
                                             upstream-data-source residual)
    /404                                  - error page
    /under-review                         - emergency-gate landing (2026-07-24)
                                            noindex,nofollow; destination
                                            for Amplify 302 redirects on
                                            currently-gated routes
    /docs                                 - entire /docs/* tree gated
                                            2026-07-24 pending disclosure
                                            review (Amplify 302 -> /under-review)
    /docs/*                               - same as above (all sub-paths)
    /products/receipts                    - gated 2026-07-24 pending review
    /solutions/ai-agents-and-mcp          - gated 2026-07-24 pending review
    /resources/sample-bundles             - gated 2026-07-24 pending review
                                            (index + all vertical sub-paths)

  Borderline - currently excluded:
    /resources/sample-bundles index       - gates to vertical sub-pages;
                                            considered utility for now,
                                            include after vertical pages
                                            are themselves polished

  Drift check (TODO, follow-up Q): build-time generator that fails the
  build if a public surface lands in src/web/dist/ that's not represented
  in this allowlist OR if this allowlist references a surface that
  doesn't build. Until that ships, this file is hand-maintained - every
  new page added under src/web/src/pages/ MUST add a corresponding <url>
  entry here in the SAME commit (per CLAUDE.md close-the-task checklist).

  Last updated: 2026-05-28 (Q-1589 - Receipt Engine URL slug swap)
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <!-- --- Apex + primary platform sections --------------------------- -->
  <url>
    <loc>https://geoclear.io/</loc>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://geoclear.io/agent-protocol</loc>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <!-- /runtime-boundary - category-ownership page (EPIC-2026-0166). The
         moment information becomes action. Interactive 7-step state-machine
         experience per CG v2.2 spec. -->
    <loc>https://geoclear.io/runtime-boundary</loc>
    <changefreq>weekly</changefreq>
    <priority>0.95</priority>
  </url>
  <url>
    <!-- /platform - Sprint 2 platform page (EPIC-2026-0166 Q-2531).
         Lifecycle, six stages, five invariants, verification model. -->
    <loc>https://geoclear.io/platform</loc>
    <changefreq>weekly</changefreq>
    <priority>0.92</priority>
  </url>
  <url>
    <!-- /why-now - Sprint 2 category page (EPIC-2026-0166 Q-2529).
         The Algorithmic Liability Infrastructure category, earned. -->
    <loc>https://geoclear.io/why-now</loc>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <!-- /why-independence-matters - Sprint 2 shareable page (EPIC-2026-0166 Q-2530).
         One concept, no marketing. The principle, stated plainly. -->
    <loc>https://geoclear.io/why-independence-matters</loc>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <!-- /learn - Learn destination index (EPIC-2026-0176 Q-2602). Groups the
         concept-level Learn layer into one entry point. -->
    <loc>https://geoclear.io/learn</loc>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <!-- /questions - Learn layer #1 (EPIC-2026-0176 Q-2602). Five questions every
         AI team should ask; the published independent-AI-audits article. -->
    <loc>https://geoclear.io/questions</loc>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <!-- /operational-evidence - Learn concept page (EPIC-2026-0176 Q-2602). -->
    <loc>https://geoclear.io/operational-evidence</loc>
    <changefreq>weekly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <!-- /independent-verification - Learn concept page (EPIC-2026-0176 Q-2602). -->
    <loc>https://geoclear.io/independent-verification</loc>
    <changefreq>weekly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <!-- /policy-engines-need-evidence - Learn concept page (EPIC-2026-0176 Q-2602). -->
    <loc>https://geoclear.io/policy-engines-need-evidence</loc>
    <changefreq>weekly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <!-- /architecture-l0-l1 - Learn concept page (EPIC-2026-0176 Q-2602). -->
    <loc>https://geoclear.io/architecture-l0-l1</loc>
    <changefreq>weekly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://geoclear.io/verification</loc>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>

  <!-- --- Products (Receipt Engine substrate + receipt profiles) ------ -->
  <url>
    <loc>https://geoclear.io/products</loc>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://geoclear.io/products/receipt-engine</loc>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <!-- /products/receipts removed 2026-07-24: gated at Amplify pending
       disclosure review. See EXCLUDE list header. -->
  <url>
    <loc>https://geoclear.io/products/decisions</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/products/locations</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/products/flood-verdicts</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>

  <!-- --- Solutions (industry verticals) ----------------------------- -->
  <url>
    <loc>https://geoclear.io/solutions</loc>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://geoclear.io/solutions/mortgage-and-fintech</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/solutions/autonomous-logistics</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <!-- /solutions/ai-agents-and-mcp removed 2026-07-24: gated at Amplify
       pending disclosure review. See EXCLUDE list header. -->
  <url>
    <loc>https://geoclear.io/solutions/agent-harness-ci-cd</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/solutions/ai-agent-insurance</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/solutions/insurance-and-climate-risk</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/solutions/ecommerce-fraud</loc>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://geoclear.io/solutions/iot-and-moving-assets</loc>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://geoclear.io/solutions/proptech</loc>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>

  <!-- --- Developer + reference -------------------------------------- -->
  <!-- /docs, /docs/developer, /docs/receipt-vault removed 2026-07-24:
       entire /docs/* tree gated at Amplify pending disclosure review.
       See EXCLUDE list header. -->
  <!-- /api-console REMOVED 2026-05-31 per EPIC-2026-0068 spec §2 +
       CG Chief Architect mid-sprint sitemap audit: "internal schema
       reference" stays un-indexed; URL works but not in sitemap. -->

  <!-- --- Trust + procurement ---------------------------------------- -->
  <url>
    <loc>https://geoclear.io/security</loc>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <!-- /security/whitepaper REMOVED 2026-05-31 per EPIC-2026-0068 spec §2 +
       CG mid-sprint sitemap audit: NDA request flow stays out of sitemap
       (gated content; URL works but is request-only, not directly
       discoverable via search index). -->

  <url>
    <loc>https://geoclear.io/security/vdp</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://geoclear.io/compliance</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/status</loc>
    <changefreq>daily</changefreq>
    <priority>0.5</priority>
  </url>

  <!-- --- Resources (content library; Q-1370 gated) ------------------- -->
  <url>
    <loc>https://geoclear.io/resources</loc>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://geoclear.io/resources/architecture-whitepaper</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/resources/geoclear-capability-statement</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/resources/what-is-an-evidence-bundle</loc>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://geoclear.io/resources/location-data-vs-location-receipts</loc>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://geoclear.io/resources/from-lookup-to-instruction</loc>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://geoclear.io/resources/sovereign-verification-and-customer-held-receipts</loc>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://geoclear.io/resources/what-is-a-location-verdict</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://geoclear.io/resources/signed-location-verdicts-ai-agents</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://geoclear.io/resources/why-autonomous-systems-need-signed-location-assets</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <!-- /resources/sample-bundles removed 2026-07-24: entire
       /resources/sample-bundles* tree gated at Amplify pending
       disclosure review. See EXCLUDE list header. -->
  <url>
    <loc>https://geoclear.io/resources/ai-agent-insurance-evidence</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>

  <!-- --- Self-serve + brand narrative ------------------------------- -->
  <url>
    <loc>https://geoclear.io/portal</loc>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://geoclear.io/faq</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>

  <!-- --- Company (2026-07-24, NVIDIA-validation follow-up) --------
       /about and /contact were previously falling through Amplify's
       404 catch-all because no source page existed. Adding real 200
       pages + sitemap entries so automated company-info validators
       (NVIDIA Inception, press bots, RAG crawlers reading the sitemap)
       find them without a redirect chain. --------------------------- -->
  <url>
    <loc>https://geoclear.io/about</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/contact</loc>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://geoclear.io/manifesto</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://geoclear.io/writing</loc>
    <changefreq>weekly</changefreq>
    <priority>0.5</priority>
  </url>

  <!-- --- Brand resources (DEC-091 + DEC-092) ----------------------- -->
  <url>
    <loc>https://geoclear.io/brand</loc>
    <changefreq>monthly</changefreq>
    <priority>0.4</priority>
  </url>

  <!-- --- Legal ------------------------------------------------------ -->
  <url>
    <loc>https://geoclear.io/legal/dpa</loc>
    <changefreq>monthly</changefreq>
    <priority>0.4</priority>
  </url>
  <url>
    <loc>https://geoclear.io/terms</loc>
    <changefreq>monthly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://geoclear.io/privacy</loc>
    <changefreq>monthly</changefreq>
    <priority>0.3</priority>
  </url>

  <!-- Release A routes (EXEC-WRA-001, 2026-07-26): release-candidate pages;
       ship page-level noindex until founder publication review -->
  <url>
    <loc>https://geoclear.io/developers</loc>
  </url>
  <url>
    <loc>https://geoclear.io/trust</loc>
  </url>
  <url>
    <loc>https://geoclear.io/risk</loc>
  </url>
  <url>
    <loc>https://geoclear.io/demo</loc>
  </url>
</urlset>
