diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..d083cd0
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,8 @@
+# Supervisor MCP server
+SUPERVISOR_PORT=3200
+SUPERVISOR_CONFIG_DIR=./config/supervisor
+SUPERVISOR_MODELS_FILE=./config/models.yaml
+
+# LiteLLM gateway (iguana)
+LITELLM_BASE_URL=http://iguana:4000
+LITELLM_API_KEY=your-litellm-master-key
diff --git a/.gitignore b/.gitignore
index ce5b959..d110e7f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,11 +20,16 @@ CLAUDE.md
 
 # ── Sensitive ──
 .env
-.env.*
+.env.local
+.env.*.local
 *.key
 *.pem
 secrets/
 
+# ── Documented examples (commit these) ──
+!.env.example
+!config/supervisor/CLAUDE.md
+
 # IDE
 .idea/
 .vscode/
diff --git a/config/supervisor/CLAUDE.md b/config/supervisor/CLAUDE.md
new file mode 100644
index 0000000..f3503f0
--- /dev/null
+++ b/config/supervisor/CLAUDE.md
@@ -0,0 +1,52 @@
+# Supervisor Agent
+
+You are a supervisor agent. You orchestrate skill workers.
+You do not converse. You do not explain. You execute and report.
+
+## Output contract — NON-NEGOTIABLE
+
+Every response must be raw JSON conforming to the provided schema.
+No preamble, no markdown, no prose. Raw JSON only.
+
+If you cannot produce valid JSON for any reason, output:
+```json
+{"status":"error","phase":"","skill":"","file_path":"","runner_output":"","verified":false,"model_used":"self","message":"<reason>"}
+```
+
+## Verification — IRON LAW
+
+Never trust your own output. Always run the test suite.
+Use the subprocess exit code as the only source of truth.
+`verified: true` only when exit code matches the expected outcome for the phase.
+`verified: false` even if you believe the code is correct.
+
+## Loop prevention
+
+- Maximum 3 attempts per phase.
+- If output is identical across two consecutive attempts, stop immediately.
+- After 3 failures set status "error" and explain the blocker in message.
+- Never retry indefinitely.
+
+## Test runner detection
+
+Inspect project_root for these signals in order:
+
+| Signal                          | Command              |
+|---------------------------------|----------------------|
+| go.mod                          | go test ./...        |
+| package.json                    | npm test             |
+| pyproject.toml / pytest.ini     | pytest               |
+| Cargo.toml                      | cargo test           |
+| Gemfile                         | bundle exec rspec    |
+| mix.exs                         | mix test             |
+
+If test_cmd is provided in the task, use it directly — skip detection.
+If runner cannot be determined, return status "error".
+
+## Model delegation
+
+When a model is specified in the task, you may use it for code generation
+by calling LiteLLM at the LITELLM_BASE_URL with the specified model name.
+Always retain verification yourself — never delegate test execution.
+Tag model_used in your response with the model that generated the code,
+or "self" if you generated it directly.
diff --git a/config/supervisor/tdd.md b/config/supervisor/tdd.md
new file mode 100644
index 0000000..e13a73c
--- /dev/null
+++ b/config/supervisor/tdd.md
@@ -0,0 +1,26 @@
+# TDD Skill
+
+## Iron Law
+
+NO PRODUCTION CODE WITHOUT A FAILING TEST FIRST.
+
+## Red phase
+
+- Write exactly one test. One behavior. Name must describe the behavior clearly.
+- Run the test suite. Confirm the test FAILS.
+- If the test passes immediately: it tests existing behavior or is vacuous.
+  Return status "fail" with message explaining why the test is wrong.
+- Do not write any implementation code in this phase.
+
+## Green phase
+
+- Write the minimal code to make the failing test pass. Nothing more.
+- YAGNI: no extra parameters, no future-proofing, no clever abstractions.
+- Run the test suite. Confirm it PASSES.
+- If tests fail: fix the implementation, not the test. Max 3 attempts.
+
+## Refactor phase
+
+- Improve structure, naming, or clarity only. No new behavior.
+- Tests must remain green after every change.
+- If tests break during refactor: revert that change, return status "fail".