Hi. I'm building a non-App-Store executable with gcc via a Makefile. I have signing set up. I also was able to submit the executable for notarization. However, it was rejected because it hasn't been "hardened". How can I harden the executable in a way that works with my build process using Make?

How do I confirm that notarization actually worked on a MacOS app (not going through the App Store)? I got back "success" from the server. However, when a user runs the software, they still get the "downloaded from the Internet" warning. It was a lot of trouble to set up our build servers to do the extra steps of notarizing and stapling. What can I do to verify the app on the development machine?