diff --git a/config/wp7-02-oneapi-test.json b/config/wp7-02-oneapi-test.json
new file mode 100644
index 0000000..7f39b00
--- /dev/null
+++ b/config/wp7-02-oneapi-test.json
@@ -0,0 +1,37 @@
+{
+  "config_set_version": 1,
+  "gateway_account_ref": "oneapi-intelligrow-test",
+  "models": [
+    {
+      "config_version": 1,
+      "gateway_account_ref": "oneapi-intelligrow-test",
+      "model_id": "gemini-3.1-flash-image-preview",
+      "route_profile": {
+        "endpoint": "https://oneapi.intelligrow.cn/v1beta/models/gemini-3.1-flash-image-preview:generateContent",
+        "mode": "sync",
+        "protocol_version": "gemini-native-v1beta"
+      }
+    },
+    {
+      "config_version": 1,
+      "gateway_account_ref": "oneapi-intelligrow-test",
+      "model_id": "gemini-3-pro-image-preview",
+      "route_profile": {
+        "endpoint": "https://oneapi.intelligrow.cn/v1beta/models/gemini-3-pro-image-preview:generateContent",
+        "mode": "sync",
+        "protocol_version": "gemini-native-v1beta"
+      }
+    },
+    {
+      "config_version": 1,
+      "gateway_account_ref": "oneapi-intelligrow-test",
+      "model_id": "gpt-image-2",
+      "route_profile": {
+        "endpoint": "https://oneapi.intelligrow.cn/v1/images/generations",
+        "mode": "sync",
+        "protocol_version": "openai-images-v1"
+      }
+    }
+  ],
+  "schema_version": "1.0"
+}
diff --git a/tests/package/wp7-02-external-contract.test.mjs b/tests/package/wp7-02-external-contract.test.mjs
index 1dc4348..8618a30 100644
--- a/tests/package/wp7-02-external-contract.test.mjs
+++ b/tests/package/wp7-02-external-contract.test.mjs
@@ -1,4 +1,5 @@
 import assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
 import { test } from "node:test";
 
 import {
@@ -95,6 +96,20 @@ test("TDD-WP7-EXT-001 remains externally blocked without confirmation, config an
   assert.equal("verified" in readiness, false);
 });
 
+test("TDD-WP7-EXT-001 fixes independent OneAPI routes without embedding credentials", () => {
+  const manifest = JSON.parse(readFileSync("config/wp7-02-oneapi-test.json", "utf8"));
+  assert.equal(manifest.config_set_version, 1);
+  assert.equal(manifest.gateway_account_ref, "oneapi-intelligrow-test");
+  assert.deepEqual(manifest.models.map((entry) => entry.model_id), WP7_02_MODEL_IDS);
+  assert.deepEqual(manifest.models.map((entry) => entry.route_profile.protocol_version), [
+    "gemini-native-v1beta",
+    "gemini-native-v1beta",
+    "openai-images-v1",
+  ]);
+  assert.equal(manifest.models.every((entry) => entry.route_profile.endpoint.startsWith("https://oneapi.intelligrow.cn/")), true);
+  assert.doesNotMatch(JSON.stringify(manifest), /api[_-]?key|authorization|bearer|sk-[A-Za-z0-9]/i);
+});
+
 test("TDD-WP7-EXT-001 writes blocked evidence without mock or sensitive payloads", () => {
   const evidence = WP7_02_MODEL_IDS.map((modelId) => buildBlockedModelEvidence({
     blockers: ["real_gateway_credentials_absent", "real_model_config_absent"],