BINKY-WP-0006: wire mail-triage path and mark T01–T04 done

Document live llm-connect smoke + host port-forward; ensure git identity
and LLM_CONNECT_URL defaults for railiance timers.

scripts/railiance-rhythm/run-common.sh

@@ -31,12 +31,25 @@ require_repo() {
 require_llm_connect() {
   # Server-side rhythm uses llm-connect HTTP (OpenRouter), never Claude CLI.
   if [[ -z "${LLM_CONNECT_URL:-}" ]]; then
-    # In-cluster default when running inside k8s; host timers may override.
-    export LLM_CONNECT_URL="${LLM_CONNECT_URL:-http://llm-connect.activity-core.svc.cluster.local:8080}"
+    # Host cannot resolve cluster DNS; default to local port-forward target.
+    # In-cluster Jobs should set LLM_CONNECT_URL to the cluster service.
+    if curl -sf -m 1 "http://127.0.0.1:18080/health" >/dev/null 2>&1 \
+      || curl -sf -m 1 "http://127.0.0.1:18080/" >/dev/null 2>&1; then
+      export LLM_CONNECT_URL="http://127.0.0.1:18080"
+    else
+      export LLM_CONNECT_URL="http://llm-connect.activity-core.svc.cluster.local:8080"
+    fi
   fi
   log "LLM_CONNECT_URL=${LLM_CONNECT_URL}"
 }
 
+ensure_git_identity() {
+  git -C "${BINKY_REPO}" config user.email >/dev/null 2>&1 \
+    || git -C "${BINKY_REPO}" config user.email "agent-harness@railiance.local"
+  git -C "${BINKY_REPO}" config user.name >/dev/null 2>&1 \
+    || git -C "${BINKY_REPO}" config user.name "agent-harness"
+}
+
 require_claude() {
   # Deprecated for Railiance. Kept only so old docs fail loudly with the right message.
   log "ERROR: Claude CLI is not the Railiance execution path (BINKY-WP-0006)."

scripts/railiance-rhythm/run-mail.sh

@@ -4,6 +4,8 @@ set -euo pipefail
 # shellcheck disable=SC1091
 source "$(dirname "$0")/run-common.sh"
 require_repo
+ensure_git_identity
+require_llm_connect
 log "START mail-scan"
 # Deterministic pre-step (no Claude) — uses AppRole + OpenBao mail lane.
 agent-harness mail-scan \