PyCardano tag v0.19.2 and root manifest 0.19.2 agree; native Poetry verifies the root lock content hash. All 95 lock entries and their main/dev/docs groups, extras, markers and candidate distribution hashes remain retained. Package occurrences are separated by locked group. This does not verify a published wheel/sdist or installed Python environment; example/full-stack and Haskell integration-test projects are outside this production root.
Next: Verify the published Python distribution provenance and collect an installed inventory for an explicitly selected Python/platform/extra configuration.
profile:pycardano:bb6954c174a05503413c3078