diff --git a/web/.env.example b/web/.env.example
new file mode 100644
index 0000000..769e9aa
--- /dev/null
+++ b/web/.env.example
@@ -0,0 +1,23 @@
+# =============================================================================
+# ByteLyst Trading — Web Dashboard Environment Configuration
+# Copy this file to .env.local and fill in your values.
+# All VITE_ variables are embedded at build time — do not put secrets here.
+# =============================================================================
+
+# --- Backend API ---
+# Base URL of the deployed trading backend — NO /api suffix.
+# Web code appends /api/... paths itself (e.g. /api/state, /api/feature-flags).
+VITE_TRADING_API_URL=http://localhost:4018
+
+# --- Platform Service ---
+# URL of the ByteLyst platform-service (auth, kill-switch, telemetry).
+VITE_PLATFORM_URL=http://localhost:4003/api
+
+# --- Feature Flags (build-time overrides) ---
+# Override backtest gate at build time. Runtime flag from /api/feature-flags takes precedence.
+VITE_BACKTEST_ENABLED=false
+
+# --- WebSocket ---
+# Override the Socket.IO path if the backend is served behind a reverse proxy that remaps it.
+# Leave blank to use the default path (/socket.io).
+VITE_SOCKET_PATH=
diff --git a/web/.env.local b/web/.env.local
new file mode 100644
index 0000000..688f3dd
--- /dev/null
+++ b/web/.env.local
@@ -0,0 +1,23 @@
+# =============================================================================
+# ByteLyst Trading — Web Dashboard Environment Configuration
+# Copy this file to .env.local and fill in your values.
+# All VITE_ variables are embedded at build time — do not put secrets here.
+# =============================================================================
+
+# --- Backend API ---
+# Base URL of the deployed trading backend — NO /api suffix.
+# Web code appends /api/... paths itself (e.g. /api/state, /api/feature-flags).
+VITE_TRADING_API_URL=https://api.bytelyst.com/invttrdg
+
+# --- Platform Service ---
+# URL of the ByteLyst platform-service (auth, kill-switch, telemetry).
+VITE_PLATFORM_URL=https://api.bytelyst.com/platform/api
+
+# --- Feature Flags (build-time overrides) ---
+# Override backtest gate at build time. Runtime flag from /api/feature-flags takes precedence.
+VITE_BACKTEST_ENABLED=false
+
+# --- WebSocket ---
+# Override the Socket.IO path if the backend is served behind a reverse proxy that remaps it.
+# Leave blank to use the default path (/socket.io).
+VITE_SOCKET_PATH=