>>haramb+(OP)
If it "was AI" it should be easy enough for him to prove by pulling up his account on whatever AI video generation service he used and showing the generation in his account history.
>>Kruton+j82
Not just that, but a strong defense would also want to show evidence that the user actually ran those commands, for example, by providing shell history files.