Watch condition: whether the project documents and implements explicit authentication, authorization, and safe deployment controls for remotely accessible file editing.
Thesis
web-edit treats direct human file editing as a companion surface to remote agent work, rather than routing every change through the model.
Observed facts
Simon Willison says he wanted to edit a credentials file from his phone while working with Codex Remote without sending those credentials through the LLM.
1web-edit 0.1a0 is a Python web app for viewing and editing files in a folder; the described deployment runs over Tailscale, and its editor uses CodeMirror 6 for mobile experience.
1
Mechanism
A browser interface exposes the folder for direct user edits, while the agent can start the app and the phone connects over the user's Tailscale network. This creates a human-operated path for sensitive file changes that does not require putting file contents into a model conversation. The source describes the intended workflow, not a formal isolation or authorization design.
Why now
remote agent workflows make it easier to delegate work from a phone, but some changes—especially credentials—remain better handled directly by the operator. A small web surface can fill that gap without claiming that the agent should inspect or modify every file itself.
Implications
teams may benefit from separating agent-mediated work from narrowly scoped human operations on sensitive files.
the convenience of a remotely reachable editor also makes access control and network configuration part of the operational risk, rather than something established by the source.
Evidence boundary
the public post documents the author's motivation, implementation choices, and intended Tailscale setup; it does not report a security audit, threat model, access-control behavior, or deployment outcomes. The tool should not be treated as proven safe for secrets merely because its motivation is to avoid passing them through an LLM.
Watch conditions
whether the project documents and implements explicit authentication, authorization, and safe deployment controls for remotely accessible file editing.