The whole check: one fetch, then arithmetic.
injected so a test runs without network and a caller can pass a cache-wrapped fetch (p2 payloads are immutable per version)
Optional
The whole check: one fetch, then arithmetic.