"Mining Bitcoin with pencil and paper: 0.67 hashes per day" suggests that doing SHA256 hashes by hand requires on the order of 36 hours of work.
I've done some work on "Verifying Bech32 Checksums with Pen and Paper", though I have not timed myself. That work is slowly being folded into my work on Shamir Secret Sharing (over the Bech32 alphabet) using paper computers in my SSS32 project to design a new master-secret format.
I have never tried to do any elliptic curve operations by hand and I have always assumed that it doing so many modular arithmetic operations over such large numbers is just too tedious and error prone to do by hand.
If you are willing to use a computer to pre-generate a list of nonces (and SHA256 midstates for your nonce/public key for BIP340), it might be plausible that you could compute an ECDSA or BIP340 signature, as the remaining steps only require a few modular arithmetic operations. While such a list of nonces is independent of your private key and your transaction, if that data were leaked it would compromise your private key from your signature, so even pre-computing that data may not be secure enough for whatever your purpose is.