<?xml version="1.0" encoding="UTF-8"?>
<!--
  Sitemap for toolkit.tradeca.co — added 13 Aug 2026.

  DELIBERATELY MINIMAL. It lists only pages that are public, stable, and that
  we actually want found in search. Its immediate job is to give
  /not-tradecafx a second, durable discovery path: the manual "Request
  indexing" click is a one-off, whereas a sitemap is re-read on every crawl,
  so the page keeps a route back into the index without anyone remembering to
  resubmit it.

  NOT LISTED, on purpose:
    - Funnel and sales pages (/launch, /one-framework, /proof, /join/one,
      /reserve). Whether those should rank in organic search is a marketing
      decision, not a technical one — several are meant to be reached from a
      specific ad or email rather than found cold. Add them if that is the
      intent; excluding them from the sitemap does not block them, it just
      declines to advertise them.
    - The app itself. Login-gated, and every route returns the same shell.
    - "/" — it redirects to auth or home depending on session, so there is no
      stable page there to index.

  ⚠️ MAINTENANCE: the /legal/<slug> entries mirror rows in the
  `legal_documents` table where is_published = true. This file is STATIC, so
  publishing or retiring a legal document will not update it. If that set
  changes, edit this file too. (Generating it at build time would need DB
  access during the build, which is a bigger change than it is worth for
  seven slugs that rarely move.)

  lastmod is the date this file was authored, not the date each page last
  changed. Google treats lastmod as a hint and ignores it when it looks
  untrustworthy, so a uniform honest date beats invented per-page precision.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <!-- The public statement. Highest priority on this host: it exists to
       outrank third-party content that misattributes another company's
       conduct to us, and outranking beats removal. -->
  <url>
    <loc>https://toolkit.tradeca.co/not-tradecafx</loc>
    <lastmod>2026-08-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>

  <!-- Published legal documents. Public, stable, and worth being findable —
       a real business's terms being searchable is itself a legitimacy signal
       of exactly the kind this host is currently arguing for. -->
  <url>
    <loc>https://toolkit.tradeca.co/legal/terms-of-service</loc>
    <lastmod>2026-08-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://toolkit.tradeca.co/legal/privacy-policy</loc>
    <lastmod>2026-08-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://toolkit.tradeca.co/legal/refund-policy</loc>
    <lastmod>2026-08-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://toolkit.tradeca.co/legal/risk-disclosure</loc>
    <lastmod>2026-08-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://toolkit.tradeca.co/legal/community-guidelines</loc>
    <lastmod>2026-08-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.4</priority>
  </url>
  <url>
    <loc>https://toolkit.tradeca.co/legal/data-retention</loc>
    <lastmod>2026-08-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.4</priority>
  </url>
  <url>
    <loc>https://toolkit.tradeca.co/legal/dmca</loc>
    <lastmod>2026-08-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.4</priority>
  </url>

</urlset>
