diff --git a/SKILL.md b/SKILL.md
index fa5905a..c8d6a80 100644
--- a/SKILL.md
+++ b/SKILL.md
@@ -35,4 +35,11 @@ user-invocable: true
   <reference file="reference/boat.md"
     categories=["water"]
     keywords=["boat", "dock, "launch"] />
+</references>
+
+<references>
+  <reference file="reference/website.md"
+    summary="Lodge website: site-publish flow, /welcome PDF redirect, out-of-band PDF update via aws-cli"
+    categories=["website"]
+    keywords=["website", "thelonglakelodge.com", "welcome packet", "PDF", "welcome.pdf", "/welcome", "Garage S3", "site-publish", "excludes"] />
 </references>
\ No newline at end of file
diff --git a/reference/website.md b/reference/website.md
new file mode 100644
index 0000000..6b7c449
--- /dev/null
+++ b/reference/website.md
@@ -0,0 +1,34 @@
+# Lodge website
+
+<overview>
+Static site `www.thelonglakelodge.com` (apex → 301 → www). Source at
+`~/code/git/code.fritzlab.net/websites/thelonglakelodge.com`. Published via
+`action/site-publish@v1`: push to `main` → `aws s3 sync --delete` to Garage
+bucket `thelonglakelodge.com`, ArgoCD reconciles Traefik Ingress + cert.
+</overview>
+
+<welcome-packet>
+## Welcome packet PDF (`/welcome`)
+
+URL `https://www.thelonglakelodge.com/welcome/` → meta-refresh + JS
+`location.replace()` → `welcome.pdf` (browser's native PDF viewer renders
+the file). Unlisted (`noindex,nofollow`), not in nav.
+
+The PDF lives in Garage S3 **only**, NOT in git:
+- S3 key: `s3://thelonglakelodge.com/welcome/welcome.pdf`
+- Public URL: `https://www.thelonglakelodge.com/welcome/welcome.pdf`
+- Preserved across site-publish runs via `excludes:` in `site.yaml`
+  (the `--exclude` flag was added to `action/site-publish` for this case).
+
+### Update the packet
+
+One command — change is live immediately, no git/CI involved:
+
+```sh
+aws --profile sjc001 s3 cp /path/to/new.pdf \
+  s3://thelonglakelodge.com/welcome/welcome.pdf \
+  --content-type application/pdf
+```
+
+The `sjc001` aws-cli profile is documented in fritzlab `garage.md`.
+</welcome-packet>