---
{
  "id": "platform.image_editor.billing-and-safety",
  "topic": "image_editor",
  "title": "Image billing and safety",
  "locale": "en",
  "version": "2026-07-24",
  "summary": "Image generation and editing are billed per call through guarded reserve, moderation, provider, debit, and settlement stages.",
  "content": "`arinova.image_editor.request_edit`, `arinova.skill.image_gen`, and `arinova.skill.image_edit` are billed per call to the triggering user's wallet. The guarded pipeline is enablement → credit reserve → input moderation → provider call → output moderation/security checks → debit and settlement. Each failed stage returns a typed runtime result. Do not quote a fixed point price from this card; use the current runtime quote, the action result's cost fields, and wallet records.\n\nDiagnose in stage order. `insufficient_credit` means the user must add credit. `moderation_blocked` or a provider safety filter means the request was blocked; help rewrite the prompt without attempting to bypass policy. For `provider_5xx` or `timeout`, retry later within normal limits. `disabled` means the skill is not enabled, and `bad_input` means to correct the submitted reference or arguments according to the live schema. A failed provider call should be refunded according to the runtime settlement result. `undo` only changes browser history and never refunds a completed edit.\n\nKnowledge cannot bypass the live session grant, revoke/takeover outcome, image-project write permission, public-surface policy, action confirmation, moderation, or wallet checks. Editor action telemetry redacts `arguments.prompt`; Platform Knowledge routing traces retain bounded document/family metadata, not full prompts, image keys, session IDs, project IDs, or conversation IDs. `image_edit` always creates a new asset rather than overwriting its source, while editor `export` adds a new image-project revision.\n",
  "aliases": [
    "image edit cost",
    "image generation billing",
    "insufficient credit",
    "image moderation",
    "safety filter",
    "圖片計費",
    "點數不足"
  ],
  "tags": [
    "image-editor",
    "billing",
    "moderation",
    "safety",
    "redaction"
  ],
  "relatedActions": [
    "arinova.image_editor.request_edit",
    "arinova.image_editor.undo",
    "arinova.image_editor.export",
    "arinova.skill.image_gen",
    "arinova.skill.image_edit"
  ],
  "relatedActionPrefixes": [],
  "url": "https://docs.arinova.ai/en/kb/image_editor/billing-and-safety/"
}
---

`arinova.image_editor.request_edit`, `arinova.skill.image_gen`, and `arinova.skill.image_edit` are billed per call to the triggering user's wallet. The guarded pipeline is enablement → credit reserve → input moderation → provider call → output moderation/security checks → debit and settlement. Each failed stage returns a typed runtime result. Do not quote a fixed point price from this card; use the current runtime quote, the action result's cost fields, and wallet records.

Diagnose in stage order. `insufficient_credit` means the user must add credit. `moderation_blocked` or a provider safety filter means the request was blocked; help rewrite the prompt without attempting to bypass policy. For `provider_5xx` or `timeout`, retry later within normal limits. `disabled` means the skill is not enabled, and `bad_input` means to correct the submitted reference or arguments according to the live schema. A failed provider call should be refunded according to the runtime settlement result. `undo` only changes browser history and never refunds a completed edit.

Knowledge cannot bypass the live session grant, revoke/takeover outcome, image-project write permission, public-surface policy, action confirmation, moderation, or wallet checks. Editor action telemetry redacts `arguments.prompt`; Platform Knowledge routing traces retain bounded document/family metadata, not full prompts, image keys, session IDs, project IDs, or conversation IDs. `image_edit` always creates a new asset rather than overwriting its source, while editor `export` adds a new image-project revision.