> He claims the commit logs are proof of when he did the work. They aren't, they are simply proof of when he did the commits.

Not even that, since you can trivially set the commit date to whatever you want.