What it watches
The app detects that input occurred, power state changed, the lid closed, a system session changed, or the guard desktop changed.
Security
Protection without hidden surveillance.
Paunix Guard is intentionally narrow: protect the laptop while armed, store state locally, and avoid collecting sensitive user content.
What it avoids
No key contents, no clipboard reads, no file browsing, no remote shell, no stealth screenshots, and no hidden monitoring workflow.
Local storage
Settings and event history stay under LocalAppData, not inside the Velopack install directory and not in a cloud account.
Windows limits
User-mode apps can reduce escape paths but cannot replace BitLocker, Windows account locks, physical security, or a signed enterprise kiosk policy.