We can get their real name from the bitbucket API, but what if their bitbucket real name and their OCA real name differ? Since this is a process-blocking thing you're going to need to have a break-glass scenario where the information can be manually entered.
Yep. Sorry I could have been a little clearer there :)
So I think the CRUD admin screens that get auto generated for the Model objects may well cover this. Assuming we create the Model of a Contributor with an isOCASigned flag.....