Fetch through the host's parent-fetch proxy (§5.11). Requires the net:fetch capability with url's origin in your effective allowlist (manifest ∩ the user's consent) — both are arranged at load via the consent screen.

A reachable server's reply (including a non-2xx status) RESOLVES — inspect .status. A gate/SSRF/transport failure REJECTS with an Error carrying a machine .code: forbidden (outside the allowlist), blocked (SSRF target), invalid (bad url/scheme), redirect (the host refuses to follow redirects), too-large, or network.