PlanGuard parses untrusted JSON locally, limits documents to 10 MiB, performs no network or database operations, and never executes SQL. Reports may contain query-plan metadata and should be reviewed before publication.