Build a request, fire it through Redline's proxy, and inspect exactly what comes back — no CORS, no signup.