I would start restoring trust by reverting all this guys commits. It's the best way to be sure.