User Profile

I have a macOS application that is signed, notarized, stapled, and distributed as a DMG file. I thought we had everything done correctly, but I had a user on Catalina download and test out the final package and they reported they got the message (with yellow triangle) "APP is an app downloaded from the internet. Are you sure you want to open it?" They clicked "Open", but then nothing happened, the app did not start and they didn't get any further messages. They checked the "Security & Privacy" settings, but there is no option to launch the app anyway. The "App Store and ideftified developers" option is selected. I had them "spctl -a -vv APP" at a terminal to check the app, and it shows as accepted with "source=Notarized Developer ID". Any ideas what else is stopping the app from launching? Thanks!