Looks like CoreServicesUIAgent is crashing while trying to verify the signature!
10/7/15 12:12:09.624 PM CoreServicesUIAgent[410]: Error SecAssessmentCreate: The operation couldn’t be completed. (OSStatus error -67054.)
10/7/15 12:14:47.000 PM kernel[0]: process CoreServicesUIAg[410] thread 56113 caught burning CPU! It used more than 50% CPU (Actual recent usage: 57%) over 180 seconds. thread lifetime cpu usage 90.025395 seconds, (68.169049 user, 21.856346 system) ledger info: balance: 90004425647 credit: 90016367924 debit: 11942277 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 157493407704
10/7/15 12:14:47.223 PM com.apple.xpc.launchd[1]: (com.apple.ReportCrash[474]) Endpoint has been activated through legacy launch(3) APIs. Please switch to XPC or bootstrap_check_in(): com.apple.ReportCrash
10/7/15 12:14:47.237 PM ReportCrash[474]: Invoking spindump for pid=410 thread=56113 percent_cpu=57 duration=158 because of excessive cpu utilization
10/7/15 12:14:56.839 PM spindump[344]: Saved cpu_resource.diag report for CoreServicesUIAgent version 145.1 (145.1) to /Library/Logs/DiagnosticReports/CoreServicesUIAgent_2015-10-07-121456_Zarfslab.cpu_resource.diag
10/7/15 12:15:53.997 PM com.apple.xpc.launchd[1]: (com.apple.xpc.launchd.oneshot.0x10000001.Xcode[457]) Service exited due to signal: Killed: 9
I'll file a bug. But in the meantime, I'm just gonna go ahead and delete the com.apple.quarantine attribute by hand.
If someone wants to explain the "sealed resource is missing or invalid" message out of spctl, I'd worry a little less.