Stating the obvious?
Hmm..Sympathise with the difficulties of working for someone who "embellishes" their credentials...I met a few over the years.
However - if this is a sensitive and costly MoD project and said `mate` proves dodgy - then its whistleblowing time. There have been too many cover ups (Allegedly) IMHO.
Good luck.
(As an aside, this forum will be monitored anyway so perhaps wheels are already in motion)