Agree on some levels - BUT - you've provided a 3rd party direct access to a critical system (telecommunications no less) in a foreign country. You probably hav

Agree on some levels - BUT - you've provided a 3rd party direct access to a critical system (telecommunications no less) in a foreign country. You probably have limited means to do a thorough background check on the 3rd party and you submit the work as your own. If he were able to setup a local dev environment and only provide access to that (and from there he'd move over code changes himself) then I'd be more sympathetic.