Imagine your home has security cameras, but instead of recording 24/7 and drowning you in footage, they only save clips when something interesting happens — and you can ask the system in plain English, "Did anyone try to open the back door last night?" and get the right clip on the first try. That's GUIAuditor, except the "home" is a child's smartphone and the "interesting events" are GUI interactions that might indicate grooming, financial scams, or other online harms. The committed claim: this is the first system that constructs "GUI Provenance" — a semantic, queryable record of a child's on-device interaction sequence — using a Multimodal Large Language Model running locally on the phone. The paradigm shift is from automated prevention (blocking harmful content before it happens, which inevitably produces false positives and negatives) to post-hoc forensic review (letting a guardian reconstruct what happened after the fact, with the human making the final judgment call). The distinction matters: prevention systems fail silently, while forensic systems let you audit their failures. The engineering bottleneck is obvious — you can't run an MLLM on every GUI frame in real time without killing the battery and storage. GUIAuditor's key contribution is an "evidence distillation pipeline" that reduces the volume of data requiring MLLM analysis by over 89.2% compared to periodic sampling (the industry-standard approach), with negligible accuracy loss. The system translates raw GUI event sequences into human-readable narratives, then indexes them for natural-language querying. On a benchmark of 295 interaction clips, it hits 95.23% Macro-F1 on logging significant events and retrieves correct evidence as the top result for 90.20% of natural language queries. The architecture is a two-stage pipeline: first, an evidence distillation stage that filters and compresses the raw GUI event stream (screenshots, accessibility trees, interaction logs) down to only the semantically significant moments; second, a forensic query engine that takes a guardian's natural language question and retrieves the relevant interaction record. The MLLM backbone runs on-device — no cloud dependency — which is critical for both privacy and latency. On three modern smartphones, the full pipeline adds 2.1W of power draw and 7.4 seconds of per-event processing latency, with a peak memory footprint of ~3.1GB. Integrity is solid for a systems paper. The authors built a new dataset of 295 interaction clips (not reused from prior work), tested on real smartphones (not just simulation), and report concrete resource consumption numbers. The 95.23% Macro-F1 and 90.20% top-1 retrieval accuracy are measured against their own dataset and annotation scheme, however — there's no community benchmark for this task because the task didn't exist before. The comparison to "periodic sampling approaches adopted by industry standards" for the 89.2% data reduction claim is reasonable but not independently verified. The milestone to track is whether this paradigm — post-hoc forensic review rather than real-time filtering — gets adopted by a major mobile OS or parental control vendor. The technical numbers are already at practical thresholds (2.1W is livable, 7.4s latency is acceptable for non-real-time forensics, 3.1GB memory fits modern phones). The real barrier is product integration and the regulatory/ethical framework around recording children's screen interactions. The obvious next experiment the authors didn't run: a longitudinal deployment study with actual guardians and children, measuring whether the forensic review paradigm actually leads to better safety outcomes compared to prevention-only approaches. This is almost certainly a resource and IRB constraint — running a study involving children's online safety interactions is ethically complex and logistically expensive. GUIAuditor doesn't solve child safety. What it does is create a new tool category — forensic provenance for mobile GUIs — and demonstrate that it's technically feasible on commodity hardware. The shift from "block everything suspicious" to "record what matters, let humans review" is a genuine architectural insight. Whether it survives contact with real families, privacy regulators, and adversarial actors who learn to evade GUI-level recording is the open question.
