comfyui-arc-save 1.1.1

Sign-on-arrival save nodes for ArcVelvetOS: ARC Save (image, stable) and ARC Save Audio (WAV, alpha). POSTs encoded media to the ArcVelvet arcIngest API; the C2PA-signed copy comes back and lands in your output directory. Server-side prompt moderation; plaintext prompts never enter the public manifest unless you opt in. Audio node is alpha — audio-content moderation (transcript scanning, voice-clone detection) not yet covered; see README before public use.

ComfyUI ARC Save

Sign-on-arrival save nodes for ArcVelvetOS. Two nodes ship in this package:

• ARC Save (sign on arrival) — image-side, stable. Replaces ComfyUI's SaveImage; encodes the image, POSTs the bytes to the ArcVelvet ingest API, writes the C2PA-signed copy to your output directory.
• ARC Save Audio (sign on arrival) — audio-side, alpha. Encodes a ComfyUI AUDIO clip to 16-bit PCM WAV, POSTs to the same ingest API, writes the C2PA-signed WAV + sidecar receipt. Same wire contract as the image node; same prompt-moderation gate; same fail-loudly posture.

Status: v1.1.0 — adds the audio node alongside the existing stable image node. Install by cloning into your ComfyUI custom_nodes/ directory; one-line install via ComfyUI Manager is on the way.

⚠️ ARC Save Audio — alpha framing (read before using on real audio)

Signing a WAV file attests the creation event (when, by whom, against which workflow), not the authenticity of the voice itself. Specifically:

• The signature does NOT certify that the audio is the real voice of any speaker
• The signature does NOT certify that the audio is not a deepfake or voice clone of a real person
• The signature does NOT certify that the audio contents are factually true, lawful, or consented to
• Prompt moderation covers the text input that drove the audio generation; it does NOT yet cover the audio content itself (transcript scanning, generated lyrics, voice-clone detection, audio-borne policy violations are not in the gate). Audio-content moderation is held for a separate later decision.

Implication: the audio node is appropriate for personal experimentation and alpha testing. It is NOT cleared for a public audio launch — please don't widely distribute signed audio files claiming they are "verified" in a way that implies more than what the manifest actually attests.

Why this node

ComfyUI's default SaveImage writes an unsigned PNG to disk. ARC Save signs the file before it touches disk: the unsigned bytes never exist on the file system. The signed PNG carries a C2PA manifest with platform-attested identity, your generation workflow, and a vault-bound verify URL — readable by any tool that implements the open C2PA standard.

Signing happens on ArcVelvet's servers, not in ComfyUI. When the node runs, your image bytes are POSTed over HTTPS to ArcVelvet's ingest API, signed there against ArcVelvet's C2PA keys, and the credentialed copy is returned and written to your output directory. The unsigned original never touches your disk, but it does leave your machine — the server-side signing is what allows the manifest to carry a platform-attested identity. If your workflow requires that image bytes never leave your local environment, this node is not for you.

Setup

1. Get an API key

Two paths, pick whichever is easier:

Via the web app — sign in at arcvelvet.com, open the Credentials tab on your profile, click Issue API key, give it a label (e.g. "ComfyUI laptop"). The plaintext key is shown exactly once — copy it now; it is not retrievable later. ArcVelvet is in closed alpha, so new keys are briefly held for a quick approval check; you'll get an email when the key is active.

Out-of-band — email [e-mail] with the email address you use on arcvelvet.com and "ComfyUI key request" in the subject; a key will be issued and sent to you.

2. Configure the node with your key

Copy the plaintext into arc_config.json in this repo's root:

{ "api_key": "arc_live_..." }

Or set the ARC_API_KEY environment variable.

⚠️ Credential safety

arc_config.json holds a live API credential. A leaked key gives the holder the ability to sign content as you, against your rate-limited budget, until you revoke it.

• The .gitignore in this repo prevents accidental commits.
• Humans need to manually avoid: screenshots of the file, ZIP-then-share of the custom_nodes directory, screen-shares with the file open, "send me your config" support requests.
• If your key is ever exposed (committed by mistake, posted in a chat, shown in a screen-share, included in a support bundle): contact ArcVelvet immediately at [e-mail] to have the key revoked and a fresh one issued. The faster you report, the smaller the window in which the leaked key can be used.

3. Install into ComfyUI

# Symlink or copy this directory into your ComfyUI's custom_nodes:
ln -s "$(pwd)" "<path-to-ComfyUI>/custom_nodes/comfyui-arc-save"

# Or just copy:
cp -r . "<path-to-ComfyUI>/custom_nodes/comfyui-arc-save"

Restart ComfyUI. Two nodes appear:

• ARC Save (sign on arrival) under the image/save category
• ARC Save Audio (sign on arrival) under the audio/save category

4. Use in a workflow

Image: replace any SaveImage node with ARC Save (sign on arrival). Same input shape (images, filename_prefix) plus a title field and an include_prompt_text toggle (default OFF — see "Prompt moderation + privacy" below for what the toggle controls).

Audio: wire an upstream audio node (TTS, music generator, etc. — anything that emits ComfyUI's AUDIO type) into ARC Save Audio (sign on arrival). Input shape: audio (AUDIO), filename_prefix, title, include_prompt_text. The include_prompt_text toggle controls text-prompt redaction only — the audio bytes themselves are always signed verbatim. Re-read the alpha framing at the top of this README before using on real audio.

On a successful workflow execution, two files land in your output directory:

• <prefix>_<vaultItemId>.png (or .wav for the audio node) — the signed file, ready to share
• <prefix>_<vaultItemId>.arc.json — sidecar receipt with vaultItemId, verifyUrl, contentHash, traceId

Anyone with the verify URL can hit https://arcvelvet.com/verify?type=vault&owner={uid}&item={vaultItemId} to see the provenance JSON, and append &format=file to download the signed bytes.

Testing

Standalone smoke test

pip install -r requirements.txt
python tests/test_save_smoke.py

Sends a 64×64 random-noise PNG against the live ArcVelvet ingest endpoint, asserts the receipt structure, cleans up. No ComfyUI install required.

Manual smoke test in a real ComfyUI

Run a real workflow (SD1.5 KSampler → VAE Decode → ARC Save) end-to-end through a local ComfyUI install. Verify the signed PNG opens correctly in Adobe Content Credentials inspector and shows the ArcVelvet platform claim + com.arcvelvet.generation assertion. (The inspector will note an unrecognized issuer until the production cert cutover; see "Cert status" below.)

What this includes

• Per-image encode + POST + signed-bytes write across the full batch
• Single 2-second retry on transient errors (HTTP 503, Timeout, ConnectionError); all other non-200s raise immediately
• Prompt moderation + privacy:
  • Prompts are scanned in-flight for minor-safety violations and not stored on ArcVelvet's servers on pass. The scan itself is performed by a third-party moderation provider (OpenAI's omni-moderation endpoint) over HTTPS, so your prompt text is transmitted to OpenAI for the duration of the scan and goes out of scope at both ArcVelvet and OpenAI on completion. ("Not stored" is a storage claim, not a transmission claim — the scan requires the transmission.)
  • Plaintext prompts never enter the public C2PA manifest unless you opt in. The include_prompt_text widget defaults OFF. With it off, the server walks workflow_prompt and replaces text-encoder text values with [REDACTED:sha256:<hex>] envelopes before signing — the manifest carries the workflow structure (model, sampler, seed, connectivity) but blinds the prompt text. Flip the widget ON to send the prompt verbatim into your signed manifest.
  • Server is the redaction authority. Earlier versions (pre-1.0.0) hashed prompt text on the node side. As of 1.0.0 the node sends workflow_prompt plaintext and a separate promptTextForModeration field; the server is responsible for the manifest redaction step and is the single source of truth for what becomes a hash. This avoids drift between client-version walks and what the server expects to extract.
  • Refusal on a sexual/minors hit: the server returns HTTP 451 PROMPT_FLAGGED and the node raises a clear error. The flagged prompt is preserved in a sealed, client-inaccessible collection for the ArcVelvet operator to handle (NCMEC handoff pipeline). For any non-pass moderation outcome (MODERATION_UNAVAILABLE on timeout / OpenAI errors), the node raises with the server's message.
• arc_config.json + ARC_API_KEY env var key loading
• Fail-loudly on any terminal error (no silent unsigned fallback)
• Sidecar .arc.json per signed image with vaultItemId / verifyUrl / contentHash
• Open-shape generation assertion (batch_index / batch_size baked in; the redacted_prompt flag is now set by the server based on include_prompt_text; additive fingerprint slot reserved)

What's NOT yet shipped

• ComfyUI Manager / Comfy Registry packaging (the install story is currently "symlink the directory into custom_nodes/"; one-line install via Manager lands with the packaging piece)

Rate-limit note for batch workflows

The ArcVelvet ingest endpoint allows 5 signings per minute per API key plus 20 signings per minute per account (an aggregate cap across all keys on the same account). A batch of 6+ images on one key, or 21+ across keys on one account, will trigger ERR_RATE_LIMITED partway through and the node will halt with the exact failure point named. Images already signed before the rate-limit hit are saved (and on rerun, content-hash idempotency on the server will dedup them so you don't double-charge). For larger batches, either wait a minute and rerun the same workflow, or split the batch upstream.

Cert status (read before sharing signed files publicly)

The signed PNGs verify cryptographically and the embedded provenance is real. Until the production signing certificate is recognized by the major C2PA verifiers, third-party tools (Adobe's inspector, contentauthenticity.org) will note an unrecognized issuer. This is a separate certificate-trust step, not a defect in the signed file itself.

During this period, the ArcVelvet verify URL embedded in every signed file's sidecar .arc.json is the authoritative verification surface — open it in any browser to see the provenance record. The third-party-inspector path will become clean once the production certificate is provisioned.

License

MIT.