Function fetch_and_sanitize 

pub async fn fetch_and_sanitize(
    cfg: &Config,
    url: &str,
) -> Result<SanitizedContent>

Fetch a URL, run the 2-layer sanitize pipeline, wrap in <untrusted_content>, and persist to <cfg.paths.home>/web_log/.

Errors

• crate::Error::Http / crate::Error::Sanitize from fetch::get (network, non-2xx status, body cap exceeded).
• crate::Error::Io / crate::Error::Json from log persistence.

The semantic sanitize layer fails open: a missing ANTHROPIC_API_KEY (i.e. cfg.llm.api_key == None) or non-2xx API response returns the regex-stripped text unchanged, so an LLM outage does not break URL fetch.