- tls-config.ts: skip HTTP→HTTPS redirect for localhost/127.0.0.1 callers so internal services (infra-health, fix-engine) can call via plain HTTP - routing-rules.yaml: add magatama-infra-health + infra-health to ctx_health_diagnose allowed callers; add qwen2.5:3b to fallback chain