1) Git commits have timestamps. 2) Proving I did on company laptop is their onus. Innocent until proven guilty. ;-P 3) I do that. Along with randomisation of sample data. but yeah, you make a very important point in general. 99% of people get screwed on such things. 4) If I do something using company laptop, it is bound to be logged somewhere. All my git visits are also logged and archived for 10 years as per law. So proving I did it using company laptop is easy and it is them who have to prove it. And a foolish lawyer is a dream come true because then I can keep dismissing his every argument as wasting the learned court's time.

But yes, keeping things straight forward is always a better idea.