- Add concise code-derived onboarding for all nested modules\n- Name a real entry point and current consumers per package
fetchguard
fetchguard performs policy-controlled outbound HTTP fetches with size, timeout, and address safety checks. No current in-repository package imports it directly; its public entry point is fetchguard.Fetch in fetch.go.