Not sure, even then, doesn‘t reflog keep it quite a while locally on the machine that the force push was sent? Maybe he did not commit his changes for a month and sent a git reset —-hard