<?xml version="1.0" encoding="UTF-8"?>
<!--
  hub.credicorp.co.uk — sitemap.xml

  hub is the internal JSON-API host (HUB-M1-SKELETON-SPEC). It has NO public, indexable
  HTML content: every customer/staff surface lives behind the /internal/v1 service-token
  ring, the /hooks provider-HMAC ring, or the /hub/* control-hop HMAC ring, and robots.txt
  carries a blanket `Disallow: /` (SPS-1 lock; mirrors the clients + mrs portals).

  The only anonymously reachable, 200-returning, side-effect-free GET routes on this host are
  the root identity splash and the public liveness/readiness/status probes. They expose no
  customer, staff, money, or auth surface, so listing them here is safe and keeps the document
  a VALID (non-empty) urlset rather than a placeholder. Mirrors the marketing renderer shape
  (urlset → url → loc/changefreq/priority): build-files/credicorp.co.uk/.../app/Seo/SitemapXml.php.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://hub.credicorp.co.uk/</loc>
    <changefreq>weekly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://hub.credicorp.co.uk/public/v1/health</loc>
    <changefreq>daily</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://hub.credicorp.co.uk/public/v1/healthz</loc>
    <changefreq>daily</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://hub.credicorp.co.uk/public/v1/status</loc>
    <changefreq>daily</changefreq>
    <priority>0.3</priority>
  </url>
</urlset>
