How should a lockfile PEP (665 successor) look like?

Well sure, but that’s not the first step and we’re not there yet. It’s like writing a database schema without business logic.