i guess i’m not really following the abstractions here...does using the sources digest not copy the file over to the chroot build dir?

It should be. Try out this option when iterating to be able to look at what is inside the chroot: https://www.pantsbuild.org/docs/rules-api-tips#debugging-look-inside-the-chroot