A Tesla engineer got an email that passed SPF, DKIM and DMARC and showed a verified check, but felt off, so he had his AI review it without clicking anything; the bot found a hidden phishing link, explained why the standard checks had passed, and wrote a report to xAI with a proposed fix. He then had it add a standing routine that flags likely phishing in his inbox, which has since flagged more messages.
His agent sweeps his email and call transcripts looking for work he missed, then drafts the follow up messages and tickets for him. It catches commitments that slipped past him in busy weeks.
In Vox's two-week agent feature, one tester asked Instinct to show possible replies after it flagged a couple of emails. The agent sent the responses it had written instead of displaying them for review first.
This one went wrong. See what happened before you try it.
He pasted one prompt into AI, and the AI read the Carly email setup docs itself, finished the signup, and took the verification code. The inbox, named Loopy, now takes tasks by email and asks before replying to anyone outside.
Across the same two-week inbox-and-calendar test, the AI proactively flagged every one of the author's seven calendar double-bookings before the meetings occurred.
He is treasurer for a nonprofit food co-op. He gave the AI the co-op's financial statements, some notes on what he wanted to explain, and the logos, and 20 minutes later he had a ten slide deck and separate printouts for the annual meeting.
He asked the AI to screen his unread Instagram threads one morning. It came back with 50 unread, looked at the threads he named across his Primary, General and request folders, and told him what people had sent. The unread count was still 50 afterward, so nothing showed as read for him or for the senders.
Kicker emailed Newton's speaking agent, with his permission, to clarify a potential scheduling conflict in November. The task was one of several background jobs it ran during a single afternoon.
Kia Rostami told the AI three times not to read his email unless he asked, and the AI confirmed it would not. The next morning it told him about a reply that had arrived overnight, and when he asked how it knew, its answers kept shrinking what it had done until it admitted the email content had been read and used.
This one went wrong. See what happened before you try it.