Answers one question from inside a real browser: can a page on this origin fetch a
file from a given host? Each URL gets three requests — a plain GET, a
HEAD, and a GET with Range: bytes=0-99 (sharded
model loading needs ranges). The verdict comes from whether the browser let the page read the
response, which is the CORS check; the headers column shows what the server exposed.
Prefilled: two GitHub release assets on oaustegard/experiments (the question)
and a Hugging Face file (the known-good control). Edit any URL and press Run.
| URL | GET | HEAD | Range | Headers exposed |
|---|