[dooberdeats]

Initial suspicions arose from the general tenor of how he talked about his past work -- the way someone speaks when they're making things up.

Non-native english speaking grammar and mistakes in Github comments. There are certain types of mistakes native English speakers make -- I make -- and the type non-native English speakers make. These are of the latter class.

His code has different styles project to project.

Logins to 3rd party tools through a VPN at every hour of the night and day -- the preempted warning that this might happen from him.

His tendency to take specific questions about his code and answer them with generalities, or more often having to think about the answer and get back to us later.

What I'm missing is hard forensic evidence.