No dependency wheel is included in this source candidate.
Download only after grouped approval, for the chosen Linux/Python3.12 architecture.
Record each wheel filename and SHA-256 in manifest.json: {"files":{"NAME.whl":"SHA256"}}.
offline_build.py refuses a missing manifest/base image and never downloads anything.
