comfyui-arc-save 1.0.1

Sign-on-arrival save node for ArcVelvetOS. POSTs the encoded image to the ArcVelvet arcIngest API and writes the C2PA-signed copy returned by the server. The unsigned bytes never touch disk. Prompt moderation runs server-side: prompts are scanned in-flight for minor-safety violations and discarded on pass; plaintext prompts never enter the public C2PA manifest unless you opt in.

ComfyUI ARC Save

Sign-on-arrival save node for ArcVelvetOS. Replaces ComfyUI's SaveImage — encodes the image, POSTs the bytes to the ArcVelvet ingest API, writes the C2PA-signed copy returned by the server to your output directory.

Status: v1.0.0 — server-side prompt moderation + manifest redaction. Pre-Comfy-Registry publish; local install only.

Why this node

ComfyUI's default SaveImage writes an unsigned PNG to disk. ARC Save signs the file before it touches disk: the unsigned bytes never exist on the file system. The signed PNG carries a C2PA manifest with platform-attested identity, your generation workflow, and a vault-bound verify URL. Anyone who later receives the file can verify it cryptographically.

Setup (development)

1. Issue an API key (operator-only — server side)

cd <arcvelvetos repo>
ARC_API_KEY_PEPPER="$(firebase functions:secrets:access ARC_API_KEY_PEPPER)" \
  node functions/scripts/arc-issue-key.mjs \
    --uid <YOUR_UID> \
    --label "comfyui-arc-save dev"

The script prints the plaintext key exactly once. Save it.

2. Configure the node with your key

Copy the plaintext into arc_config.json in this repo's root:

{ "api_key": "arc_live_..." }

Or set the ARC_API_KEY environment variable.

⚠️ Credential safety

arc_config.json holds a live API credential. A leaked key gives the holder the ability to sign content as you, against your rate-limited budget, until you revoke it.

• The .gitignore in this repo prevents accidental commits.
• Humans need to manually avoid: screenshots of the file, ZIP-then-share of the custom_nodes directory, screen-shares with the file open, "send me your config" support requests.
• If your key is ever exposed (committed by mistake, posted in a chat, shown in a screen-share, included in a support bundle): contact ArcVelvet immediately at [e-mail] to have the key revoked and a fresh one issued. The faster you report, the smaller the window in which the leaked key can be used.

3. Install into ComfyUI

# Symlink or copy this directory into your ComfyUI's custom_nodes:
ln -s "$(pwd)" "<path-to-ComfyUI>/custom_nodes/comfyui-arc-save"

# Or just copy:
cp -r . "<path-to-ComfyUI>/custom_nodes/comfyui-arc-save"

Restart ComfyUI. The node appears as ARC Save (sign on arrival) under the image/save category.

4. Use in a workflow

Replace any SaveImage node with ARC Save (sign on arrival). The node has the same input shape (images, filename_prefix) plus a title field. (The prompt-redaction toggle ships with the redaction pass — Day 1 deliberately omits it rather than show a visible widget that does nothing.)

On a successful workflow execution, two files land in your output directory:

• <prefix>_<vaultItemId>.png — the signed PNG, ready to share
• <prefix>_<vaultItemId>.arc.json — sidecar receipt with vaultItemId, verifyUrl, contentHash, traceId

Anyone with the verify URL can hit https://arcvelvet.com/verify?type=vault&owner={uid}&item={vaultItemId} to see the provenance JSON, and append &format=file to download the signed bytes.

Verification (development / pre-publication)

Standalone smoke test

pip install -r requirements.txt
python tests/test_save_smoke.py

Sends a 64×64 random-noise PNG against the live arcIngest, asserts the receipt structure, cleans up. No ComfyUI install required.

Manual smoke test in a real ComfyUI

Before any creator depends on this build, run a real workflow (SD1.5 KSampler → VAE Decode → ARC Save) end-to-end through a local ComfyUI install. Verify the signed PNG opens correctly in Adobe Content Credentials inspector and shows the ArcVelvet platform claim + com.arcvelvet.generation assertion. (The inspector will note an unknown CA until the SSL.com cert cutover; see "Cert status" below.)

What this includes

• Per-image encode + POST + signed-bytes write across the full batch
• Single 2-second retry on transient errors (HTTP 503, Timeout, ConnectionError); all other non-200s raise immediately
• Prompt moderation + privacy (v1.0.0, MINOR-SAFETY-1 Sprint 2C):
  • Prompts are scanned in-flight by the ArcVelvet server for minor-safety violations and discarded on pass. The plaintext prompt corpus never persists on the server — it lives only in the in-flight scan, then goes out of scope.
  • Plaintext prompts never enter the public C2PA manifest unless you opt in. The include_prompt_text widget defaults OFF. With it off, the server walks workflow_prompt and replaces text-encoder text values with [REDACTED:sha256:<hex>] envelopes before signing — the manifest carries the workflow structure (model, sampler, seed, connectivity) but blinds the prompt text. Flip the widget ON to send the prompt verbatim into your signed manifest.
  • Server is the redaction authority. Earlier versions (pre-1.0.0) hashed prompt text on the node side. As of 1.0.0 the node sends workflow_prompt plaintext and a separate promptTextForModeration field; the server is responsible for the manifest redaction step and is the single source of truth for what becomes a hash. This avoids drift between client-version walks and what the server expects to extract.
  • Refusal on a sexual/minors hit: the server returns HTTP 451 PROMPT_FLAGGED and the node raises a clear error. The flagged prompt is preserved in a sealed, client-inaccessible collection for the ArcVelvet operator to handle (NCMEC handoff pipeline). For any non-pass moderation outcome (MODERATION_UNAVAILABLE on timeout / OpenAI errors), the node raises with the server's message.
• arc_config.json + ARC_API_KEY env var key loading
• Fail-loudly on any terminal error (no silent unsigned fallback)
• Sidecar .arc.json per signed image with vaultItemId / verifyUrl / contentHash
• Open-shape generation assertion (batch_index / batch_size baked in; the redacted_prompt flag is now set by the server based on include_prompt_text; additive fingerprint slot reserved)

What's NOT yet shipped

• ComfyUI Manager / Comfy Registry packaging (the install story is currently "symlink the directory into custom_nodes/"; one-line install via Manager lands with the packaging piece)

Rate-limit note for batch workflows

arcIngest allows 5 signings per minute per API key (free-door cap; Sprint A0 tightening) plus 20 signings per minute per uid as an aggregate cap across all keys on the same account. A batch of 6+ images on one key, or 21+ across keys on one account, will trigger ERR_RATE_LIMITED partway through and the node will halt with the exact failure point named. Images already signed before the rate-limit hit are saved (and on rerun, the content-hash idempotency on the server will dedup them so you don't double-charge). For larger batches, either wait a minute and rerun the same workflow, or split the batch upstream.

Cert status (read before sharing signed files publicly)

The signed PNGs verify cryptographically and the embedded provenance is real. Until the SSL.com production certificate is loaded into the platform's signing keys, third-party verifiers (Adobe's inspector, contentauthenticity.org) will note that the issuing CA is not in their trust list. This is expected for the pre-production phase.

For internal testing: works now. For public distribution / external creator demos: production cert cutover is the gate, not anything in this node.

License

MIT.