I can't say that mine's the "official" view because we don't have an "official" structure, though we shall at some point.
I'm just summarizing the thoughts of the community as I understood them the last time we had a lengthy discussion about this. And in that discussion there was recognition that people might build proprietary packages on top of the toolkit for distribution.
This is a big gray area - it's not clear, for instance, that the LGPL is really necessary for libraries, GNU came up with it in order to make it clear they don't oppose commercial products linked to the GNU C library, as I understand it.
But I don't think you'd find anyone here suggesting you need to disclose your proprietary datamodel etc just because you're using OACS utilities and user verification.
