Once an application has passed File Quarantine or Gatekeeper, it will be allowed to run normally and will not be verified again [REF].
Developers can sign disk images that can be verified as a unit by the system.