as you said whatever he's doing it harder to proof then bots.
convex mirror didnt exist on RoT,so it's not a simple case of duping
assuming he has a external program running , that bypass EAC.
there's no way to proof he's cheating.
not like gm will make him download teamviewer and remote in to check LOL
I wonder how hard would that be? I'm asking for a "friend" of a "friend" of a "friend"