If Jawbone is a typical large company, they do DPI on all their employees Internet traffic and have DLP software monitoring what files are moved to what directories/removable media on employees equipment.

I think it's safe to assume that if they're pursuing this kind of lawsuit, they have realistic evidence.

If you pull and then move those files to your own media and to top it off use that code in your new job, there's a problem.

I've known people who've done it and I've had to clean up after them when it came to light where the code for certain modules came from. It sucks.

If you do a "git pull" on a repo that you don't normally work in, or after you've been told not to work on anymore, that might send up some signal flares. If it's as part of your normal work, I'm sure it's fine.