on requiring origin request header?

I noticed that Core Mobile Profile - Level 0 does mandate support for CORS
(Section 5); however, it is my understanding that neither HTML5 nor CORS
requires a UA to include an Origin header in a fetch request (whether a
CORS or non-CORS fetch). I wonder if any further mandatory language is
required to determine when an Origin header must or should be included in
fetch request.