His acts as you describe added with the all weekend production run without ongoing verification, does not justify the completely competent status you give him.
How did you determine this competency in view of you saying that he makes changes constantly ?
Who is the next up in the reporting ? What is his intervention in program editing and approval ?
Having a high end machine like a CMM, the key to pokeyoke is the way you talk with the CMM.
Have a relook at your competency evaluation process, with all due respects to your CMM operator.
See if you can introduce something like this in your CMM program ...
Program edit >> Save >> after 10 pcs CMM stops and asks for change authentication >> authorized person approves >> machining continues.