Production readiness checklist.

Workflow contract

• Export an API-compatible workflow without credentials or local file paths.
• Name required inputs, defaults, validation limits and outputs.
• Define output formats, size limits and failure responses.

Application contract

• Call the endpoint from a trusted backend, not a public client with a provider key.
• Set timeouts, retries and idempotency behaviour intentionally.
• Document how jobs and generated media move through the application.

Runtime inventory

Record the ComfyUI revision, custom-node commits, package versions, model files and hashes used by the candidate. Avoid mutable tags and floating package ranges.

Provenance review

Check model, node and code licences against the intended use. Keep source links and required notices with the candidate. This is technical inventory, not legal advice.

Functional checks

• Run known reference inputs and compare required output properties.
• Test missing, malformed and oversized inputs.
• Verify cold and warm starts on each supported GPU profile.

Operational checks

• Observe VRAM use, execution time, queue behaviour and timeout handling.
• Test parallel workers at an agreed request pattern.
• Confirm logs do not expose prompts, credentials or customer media.

Release record

Attach an immutable image digest, supported GPU profiles, reference-test results, known issues and documented changes to the candidate.

Rollback path

Keep the previous verified image available and document the endpoint change needed to restore it. A successful SEO publication is not commercial runtime clearance.