The browser reads dimensions for immediate feedback. On upload, the server checks the actual image container, size, dimensions, and content moderation result, then stores the image record under the signed-in account. Before generation, the server verifies that the stored reference belongs to that account.
The AI task creates one foreground mask through the existing workbench provider path. The completed PNG is fetched through the authenticated download route, then the browser composites the original upload and mask locally. Task state, output ownership, credits, and refund handling stay in the existing server workflow.
Credits are checked and consumed by the server for the segmentation task. Adjusting Blur radius, Edge feather, or the comparison divider does not create a new task.