Tech 2 min read

TJ_ComfyUI_HashRecorder and the reality of a blockchain-like copyright tool

IkesanContents

In the middle of the copyright debate around AI-generated content, I found a ComfyUI copyright protection tool called TJ_ComfyUI_HashRecorder, so I looked into it.

https://github.com/TJ16th/TJ_ComfyUI_HashRecorder

overview

It is a set of custom nodes that records and preserves cryptographic evidence about the creation process inside a ComfyUI workflow. Its main functions are:

nodefunction
LoadImageWithHashAndTimestamprecords a SHA256 hash and NTP-synced timestamp when an image is loaded
SaveImageWithMetadataembeds workflow JSON, hash, and timestamp into the saved image
CombineHashRecordsaggregates logs from multiple images and stores them in Markdown and SQLite, with chain hashing for tamper detection
ViewHashRecordsdisplays records in five view modes
SystemInformationcollects machine name, OS, and similar system info

The README uses strong language like “tamper detection with blockchain-style chain hashes” and “building legally valid documentation.”

what “blockchain-like” really means

When you read the code, the chain-hash implementation is basically local bookkeeping:

# get previous session hash (local DB)

It is useful as provenance tracking, but it is not a real blockchain.

what it can and cannot do

The tool is good at recording workflow provenance, but it cannot magically prove authorship by itself. It also depends on local storage and local process integrity.

compared with timelapse video

Compared with taking a timelapse of the creation process, hash logging is much lighter and easier to automate. It captures data, not visual evidence, so the two approaches solve different problems.

what it would take to make it legally meaningful

To make the evidence stronger, you would need a much tighter chain of custody: trustworthy timestamps, protected storage, and an audit trail that shows the records were not tampered with.

evaluation

My impression is that this is a decent provenance tool, but the README overstates how legally strong it is. “Blockchain-like” sounds impressive, but in practice it is still a local workflow recorder.