diff --git a/.gitignore b/.gitignore
index 11ca1b3a..f207ead8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,4 @@ logs/
 
 
 .flattened-pom.xml
+samples/src/main/resources/spn_agent_credentials.json
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2e992c27..3803f5dd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## [Unreleased]
+## [0.1.0] — 2026-09-18
 
 - Send SSE heartbeat comments on streaming endpoints (`message:stream`, `tasks/{id}:subscribe`) at a configurable
   interval (`a2at.server.heartbeat-interval-seconds`, default 15 seconds, `0` disables). Keeps intermediaries
@@ -11,6 +11,10 @@
   `TaskResult`, `BusinessFailure`, and the message records). Source- and binary-compatible; callers
   that mutate the collections returned by these getters now receive `UnsupportedOperationException`
   instead of silently corrupting engine-owned snapshots.
+- Template the sample OMC agent credentials file: the tracked
+  `samples/src/main/resources/spn_agent_credentials.json` is replaced by
+  `spn_agent_credentials.example.json` (real file is now git-ignored; copy the example to run the
+  demos). Missing credentials now fail with an actionable message instead of a bare NPE.
 
 ## [0.0.10] — 2026-09-16
 
@@ -35,7 +39,7 @@
   carries no taskId. Invalid negotiation metadata on a bare message now fails explicitly instead of being silently
   treated as a normal successful response.
 - Converge non-functional formatting and javadoc drift between `main` and `dev` so the branches differ only in the
-  Eastcom platform integration.
+  instruction-platform integration.
 
 ## [0.0.8] — 2026-09-13
 
diff --git a/README.md b/README.md
index 4792cfbf..b80412de 100644
--- a/README.md
+++ b/README.md
@@ -38,12 +38,12 @@ subscription remains open until the host-defined terminal event, explicit cancel
 
 ### 1. Add Maven dependency
 
-The current engine release is `0.0.9` on [Maven Central](https://repo.maven.apache.org/maven2/net/openan/workflow/sdk/).
+The current engine release is `0.1.0` on [Maven Central](https://repo.maven.apache.org/maven2/net/openan/workflow/sdk/).
 
-A2A-T SDK `1.1.0` is published to Maven Central. Maven resolves it automatically; no SDK source checkout or local SDK
+A2A-T SDK `1.1.1` is published to Maven Central. Maven resolves it automatically; no SDK source checkout or local SDK
 build is required. The engine depends only on
-`a2a-t-core`; host agents using content generation explicitly add `a2a-t-client:1.1.0`. A dispatched-agent service that
-validates received extension content adds `a2a-t-server:1.1.0`. See the bilingual
+`a2a-t-core`; host agents using content generation explicitly add `a2a-t-client:1.1.1`. A dispatched-agent service that
+validates received extension content adds `a2a-t-server:1.1.1`. See the bilingual
 [Developer Guide](docs/en/DEVELOPER_GUIDE.md) / [开发者指南](docs/zh/DEVELOPER_GUIDE.md) for dependency and
 upgrade guidance.
 
@@ -51,7 +51,7 @@ upgrade guidance.
 <dependency>
     <groupId>net.openan.workflow.sdk</groupId>
     <artifactId>workflow-engine</artifactId>
-    <version>0.0.9</version>
+    <version>0.1.0</version>
 </dependency>
 ```
 
@@ -61,10 +61,19 @@ For Spring Boot server-side integration:
 <dependency>
     <groupId>net.openan.workflow.sdk</groupId>
     <artifactId>spring-boot-starter</artifactId>
-    <version>0.0.9</version>
+    <version>0.1.0</version>
 </dependency>
 ```
 
+### Agent credentials for the samples
+
+The sample demos read `samples/src/main/resources/spn_agent_credentials.json`, which is
+git-ignored. Copy `spn_agent_credentials.example.json` to that name to run against the bundled
+demo OMC — the checked-in defaults pair with the demo's embedded OMC server. When targeting a
+real OMC, replace the endpoint and user name, and encrypt the password with `CredentialCrypto`
+(set `A2AT_CRED_KEY`, then use the `enc:`-prefixed output). Tests use the tracked test resource
+and need no setup.
+
 ### 2. Execute a workflow
 
 The complete, compiled example is [HostQuickStart.java](samples/src/main/java/dev/openan/workflow/engine/examples/demo/HostQuickStart.java).
diff --git a/config/checkstyle/checkstyle-suppressions.xml b/config/checkstyle/checkstyle-suppressions.xml
index 2a015bbc..c5ed4116 100644
--- a/config/checkstyle/checkstyle-suppressions.xml
+++ b/config/checkstyle/checkstyle-suppressions.xml
@@ -20,18 +20,7 @@
     <suppress checks="HideUtilityClassConstructor"
               files="SpringWorkbenchApplication\.java"/>
 
-    <!-- Cohesive protocol/demo entry methods exceeding the length budget
-         (EastcomOrderSimulatorServer exists on the dev branch only) -->
+    <!-- Cohesive protocol/demo entry methods exceeding the length budget -->
     <suppress checks="MethodLength"
-              files="SpringSpnDemo\.java|EastcomOrderSimulatorServer\.java"/>
-
-    <!-- Vendor adapter: wire-compatibility parse/fallback complexity is intrinsic
-         (dev branch only) -->
-    <suppress checks="CyclomaticComplexity"
-              files="EastcomOrderSimulatorServer\.java"/>
-
-    <!-- Conventional lowercase static-final holders: loggers, mappers, encoding flags
-         (OrderGatewayClientRuntime exists on the dev branch only) -->
-    <suppress checks="ConstantName"
-              files="EastcomOrderSimulatorServer\.java|OrderGatewayClientRuntime\.java"/>
+              files="SpringSpnDemo\.java"/>
 </suppressions>
diff --git a/config/spotbugs/spotbugs-exclude.xml b/config/spotbugs/spotbugs-exclude.xml
index b2333041..b92aba14 100644
--- a/config/spotbugs/spotbugs-exclude.xml
+++ b/config/spotbugs/spotbugs-exclude.xml
@@ -79,15 +79,13 @@
         </Or>
     </Match>
 
-    <!-- Vendor SDK adapter classes: the vendor API shape is out of our control. -->
+    <!-- The gateway adapter and protocol simulator packages exist only on the dev
+         branch: their vendor-driven API shape, catch-and-continue request loops,
+         token-service login retries, and Spring-style configuration holders are
+         accepted there. On main the package does not exist and this filter
+         matches nothing. -->
     <Match>
-        <Or>
-            <Class name="~.*OrderHttpClientAdapter.*"/>
-            <Class name="~.*OrderGatewayClientRuntime.*"/>
-            <Class name="~.*EastcomOrderByteBufWorkaround.*"/>
-            <Class name="~.*MockGatewayServer.*"/>
-            <Class name="~.*MockOrderHttpSessionClient.*"/>
-        </Or>
+        <Package name="dev.openan.workflow.engine.examples.gateway"/>
     </Match>
 
     <!-- Samples/demo code: accepted demo-quality items; review on next touch.
diff --git a/pom.xml b/pom.xml
index f2e8188b..5e21db95 100644
--- a/pom.xml
+++ b/pom.xml
@@ -48,7 +48,7 @@
     </modules>
 
     <properties>
-        <revision>0.0.10-SNAPSHOT</revision>
+  <revision>0.1.0-SNAPSHOT</revision>
         <maven.compiler.release>17</maven.compiler.release>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <a2a.java.sdk.version>1.2.0.Final</a2a.java.sdk.version>
diff --git a/samples/src/main/java/dev/openan/workflow/engine/examples/server/OmcAgentLauncher.java b/samples/src/main/java/dev/openan/workflow/engine/examples/server/OmcAgentLauncher.java
index cca7a63d..7ad1ad34 100644
--- a/samples/src/main/java/dev/openan/workflow/engine/examples/server/OmcAgentLauncher.java
+++ b/samples/src/main/java/dev/openan/workflow/engine/examples/server/OmcAgentLauncher.java
@@ -47,7 +47,16 @@ public static AgentCard cardFromResource(String resourcePath) throws Exception {
 
   /** Path of a classpath resource as an absolute file path (demo credentials lookup). */
   public static String resourcePath(String resourcePath) {
-    return OmcAgentLauncher.class.getClassLoader().getResource(resourcePath).getPath();
+    var url = OmcAgentLauncher.class.getClassLoader().getResource(resourcePath);
+    if (url == null) {
+      throw new IllegalStateException(
+          "Classpath resource not found: "
+              + resourcePath
+              + ". If this is the OMC credentials file, copy"
+              + " spn_agent_credentials.example.json to spn_agent_credentials.json"
+              + " and fill in the target OMC credentials.");
+    }
+    return url.getPath();
   }
 
   /** Load an agentcard resource, bind to the address declared in its first interface, and start. */
diff --git a/samples/src/main/resources/spn_agent_credentials.json b/samples/src/main/resources/spn_agent_credentials.example.json
similarity index 81%
rename from samples/src/main/resources/spn_agent_credentials.json
rename to samples/src/main/resources/spn_agent_credentials.example.json
index 6ae7588d..6f959a67 100644
--- a/samples/src/main/resources/spn_agent_credentials.json
+++ b/samples/src/main/resources/spn_agent_credentials.example.json
@@ -6,7 +6,7 @@
       "request_fields": {
         "grantType": "password",
         "userName": "admin",
-        "value": "enc:mqoWa/ImSwZB8kOr:/thu6iISlnmXbyD0UCXJ8U0F0iOnYMvqdg==",
+        "value": "Admin@123",
         "ipaddr": "*"
       },
       "token_field": "accessSession",
@@ -20,7 +20,7 @@
       "request_fields": {
         "grantType": "password",
         "userName": "admin",
-        "value": "enc:mqoWa/ImSwZB8kOr:/thu6iISlnmXbyD0UCXJ8U0F0iOnYMvqdg==",
+        "value": "Admin@123",
         "ipaddr": "*"
       },
       "token_field": "accessSession",