The per-env trip rate-limits each environment independently and cannot bound the aggregate trigger rate hitting the primary database. Global mode rate-limits the fleet-wide aggregate via a single shared Redis counter (mollifier:rate:{global}), ignoring per-env contributions. Behind config, default unchanged (per_env).
- redis-worker: MollifierBuffer.evaluateTripGlobal reuses the trip Lua against hash-tagged global keys
- trip evaluator gains a mode option; global mode reports reason "global_rate"
- separate TRIGGER_MOLLIFIER_GATE_MODE + TRIGGER_MOLLIFIER_GLOBAL_* env vars
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>