Personally i think the third option is the best, you get across what happened but in a non threatening way, that is of course assuming that the person that you are talking to knows what the proper procedure is. Whats done is done but for future reference, everyone involved is being paid big bucks to do what they are doing and supplying what they are supplying. If it isnt right dont accept it. You are doing all you can at this point to observe how he reacts and to preserve your evidence. I would also print up this thread also as proof of what went on since you posted several times to show the time line.