<?xml version="1.0" encoding="UTF-8"?>
<!--
  orcatrain sitemap (ORC-101). Lists only the PUBLIC content route that exists
  today: the home/landing page. The auth entry points (/login, /signup) are
  crawlable but deliberately not listed — the SPA shell self-canonicalises every
  path to apex `/`, so listing thin auth pages only sends a conflicting signal
  (ORC-101 review). ORC-102 adds the prerendered marketing/informational routes
  (how-it-works, DOTS explainer, etc.) once they render as real content.
  Authenticated app routes are never listed — they hold user-specific data and
  are Disallowed in robots.txt.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://orcatrain.com/</loc>
    <lastmod>2026-09-08</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
</urlset>
