Some additional things you may want to consider (or defer/ignore):
- How should
get_requires_for_build_sdist
andget_requires_for_build_wheel
(I’m guessing they appear inbuild-requires
tables, though maybe that should be called out explicitly). - What happens when the metadata produced during a build differs from the lock file (e.g. sdist that produces different dependencies given a different environment)?