diff --git a/configs/restic/irv-ml1/profiles.yaml b/configs/restic/irv-ml1/profiles.yaml
index 0da0eac..ca792e5 100644
--- a/configs/restic/irv-ml1/profiles.yaml
+++ b/configs/restic/irv-ml1/profiles.yaml
@@ -82,6 +82,12 @@ default:
       - /worktank/parakeet/models
       - /worktank/cosyvoice/input
       - /worktank/cosyvoice/output
+      # arbo "incognito" runs (comfy-dev, Prime's ask, 2026-10-06): uploads and
+      # chained images land in input/ as incognito-* and are swept after a TTL
+      # (default 1 h). input/ IS in source, so without this a file still alive at
+      # the 01:00 run would sit in the repo for up to 3 years. Incognito outputs go
+      # to output/arbo-incognito/, which is already covered by the output exclude.
+      - /worktank/comfyui/basedir/input/incognito-*
       # Docker internals we never want in a backup
       - /var/lib/docker/volumes/backingFsBlockDev
       - /var/lib/docker/volumes/metadata.db