Just to make sure we are not talking different things, because it pretty much sounds like it could be the reason: Did you just code sign (and harden) your app with AppWrapper or did you also use it to notarize the final app/dmg? These are two different steps (which can be combined of course).