Thanks for the quick reply! Yes the 3 points of the requirements are correct
The number of users we are expecting will be more than thousands in total potentially, but for per day we are anticipating hundreds as the starting point
The disk image contains app bundle with Contents/MacOS which contains the main app and several other executables; also Contents/Resources/ contains resources files; also Info.plist as well as the codeSignature
I have tried appending xattr to a downloaded dmg, and it still launches successfully. Wondering whether this is one of the feasible solutions, any limitations there. And other suggestions are super welcomed too!