Yes, it's time. You don't need his legal liabilities related to secret work for OW, to come back and bite you in the butt. And this sounds complicated - if the guy wasn't "on the books" as a legal employee, how does he get workman's comp? Who is liable - your H, or the insurance company of the OW?