Everyone who gets the binary has the right to the sources. Simple
Actually, anybody who wants to has the right to the sources. They don't have to buy the binary.
Putting both on the same media is the safest way to avoid any troubles.
True, although I don't think the GPL allows for the restriction that sources can only be obtained on CD from Hyperion., so the smart thing to do is to put the sources on the CD
and make them available for download too.
...before someone else does,
