Apple notarization and 10.14.5
Apple documents the requirements here:
- https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
The section that governs is yellow and hilighted:
Important
Beginning in macOS 10.14.5, all new or updated kernel extensions and all software from developers new to distributing with Developer ID must be notarized in order to run. Beginning in macOS 10.15, notarization is required by default for all software.
So, your whole account isn’t new so unless you make a new developer account, you are not required to notarize anything that’s current or in the field as long you don’t have a kernel extension.
Those are mandatory today for all updates and new builds. Your tests are what I expect and you surely can notarize everything now so you are set for 10.15
The developer I read closely for all the underpinnings and reverse engineering of this process is Howard Oakley and his Eclectic Light blog - it’s amazingly well written, clear and technically deep about how gatekeeper works in practice and what things Apple has and has not documented yet.
- https://eclecticlight.co/tag/notarization/