"Two months before letting the university know" is clearly incorrect, aside from the fact that "4-6 weeks" =/= 2 months. The written essay were the initial stage of the Safe Harbor program. We know from other articles that he consulted his boss (the acting AD), who pointed him to that program.
What we don't know:
1. How much of that 4-6 weeks was: J Rob gathering enough info to go to his boss; his boss lining up the Safe Harbor expert; determining the path fwd; any of the above sitting on it. In a bureaucracy, nothing would've been done on weekends, vacations, university holidays, lunch hour, etc. Plus team travel dates.
2. How the Safe Harbor program is administered, by whom, and what its rules are. (For example: complete anonymity?)
3. How much he consulted the Safe Harbor program leader instead of the ADs -- by university design.
4. What happened to those 1400 pills, and if he received guidance on them.
5. What J Rob told his various ADs, that they didn't report up, out, or to each other.
6. Other?
There are more than enough unanswered questions that could either clear or condemn him.