<?xml version="1.0" encoding="UTF-8"?>
<!--
  The five public pages, and only those.

  Everything else this site serves is either private or deliberately
  unreachable: /form/<code>, /invite/<token>, /reissue/<token> and
  /r/<token> all carry a credential in the URL and are sent with
  X-Robots-Tag noindex plus Referrer-Policy no-referrer, and
  /questionnaire answers 404 on purpose because the form carries a copy of
  the engine. A sitemap listing any of them would undo that.

  URLs are extensionless because that is the canonical form: order.html
  and the rest 307 to it, so listing the .html would point a crawler at a
  redirect.

  lastmod is each file's real last-commit date, not a build timestamp.
  Google ignores lastmod it finds untrustworthy, and a file that claims to
  change every deploy is exactly that. When a page changes materially,
  update its date here; if these ever drift, delete the lastmod lines
  rather than leave them lying.

  No priority or changefreq: both are ignored by every major crawler.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://wattworthreport.com/</loc>
    <lastmod>2026-10-11</lastmod>
  </url>
  <url>
    <loc>https://wattworthreport.com/order</loc>
    <lastmod>2026-10-11</lastmod>
  </url>
  <url>
    <loc>https://wattworthreport.com/sample</loc>
    <lastmod>2026-10-11</lastmod>
  </url>
  <url>
    <loc>https://wattworthreport.com/privacy</loc>
    <lastmod>2026-10-05</lastmod>
  </url>
  <url>
    <loc>https://wattworthreport.com/contact</loc>
    <lastmod>2026-09-11</lastmod>
  </url>
</urlset>
