# Public content and SEO

The selected production origin is [https://www.swedenstart.com](https://www.swedenstart.com). Set it as `APP_URL` in production; the published sitemap will be at `https://www.swedenstart.com/sitemap.xml`. The shared URL helpers generate canonical links, Open Graph URLs, WebSite structured data and sitemap URLs from the configured origin and validated request host. Configure redirects from HTTP and the apex domain to this HTTPS `www` origin at the host.

Public pages render in HTML through Blade without JavaScript: home, how it works, sample journey, five original guides, official resources, SFI, pricing, about, help/contact and draft policies. Each has a single H1, distinct title/description, canonical path, Open Graph metadata, internal links and image alt text. Home has truthful WebSite JSON-LD only; no invented operator credentials, ratings or authority endorsements.

`/sitemap.xml` includes only canonical published public paths and reviewed published guides. It deliberately omits lastmod when a trustworthy content-change date is not tracked. Private account/billing/invitation/export/admin routes never enter it. Private/withdrawal/auth pages and error responses send noindex/private no-store headers. robots.txt is not access control. Protect staging with real edge/basic-auth restrictions as well as noindex; do not publish unfinished legal drafts by turning off the launch gate.

Sources live in `resources`, seeded from `config/resources.php`. A real content review—not a successful HTTP request—sets reviewer/date. Admin changes return to draft without renewed review. SFI content/summary/template changes require a code review to preserve date-free guidance; internal review/audit dates never become a displayed SFI timetable. `swedenstart:check-links` checks only approved HTTPS hosts without redirects and never advances review dates. Keep uncertain/thin content in draft and avoid municipality-page proliferation.

Photography and WOFF2 fonts are self-hosted. Responsive WebP assets have dimensions; the main image has high fetch priority and is not lazy-loaded. No runtime hotlinks, analytics or third-party font calls exist. The interactive sample is clearly synthetic and does not persist visitor progress.

The browser report contains actual **local headless Chrome** LCP, CLS, TTFB and resource-transfer observations at 1440/768/390 px, with no CPU/network throttling. These are a local development sample, not field Core Web Vitals, a Lighthouse score, INP evidence or ranking predictions. Re-measure on the deployed HTTPS host with representative networks/devices and obtain field data before making claims.

For Search Console, the owner should add the actual property and provide their own DNS/HTML verification value. Submit the deployed sitemap after canonicals, staging access controls, policy publication and launch gates are verified. No fake token or tracker is included for SEO.