This whole notarization thing has been rather murky from the start.
A lot of developer talk is over my head, but early discussion on the Internet suggested it would only apply once an app was signed or if it was downloaded from the Internet, or that Gatekeeper could be overridden using a Terminal command (spctl) or overridden the way Apple now confirms it can be — all of which would allow a developer to test on other machines they own without notarizing.
kovidgoyal said Gatekeeper is triggered by downloading with Safari here:
https://www.mobileread.com/forums/sh...84#post3886884
In any case, I am hopeful this is now moot