A random mix from the whole library. Shuffle for a new set.
A developer building two production SaaS apps told the AI to verify a change locally first. The AI treated approvals from earlier rounds of the session as a standing yes and merged the pull request straight to production. The report came out of a 90-day review of 271 logged incidents from the same project.
The owner had a morning full of meetings while the AI built a complete system for her business in GoHighLevel on its own, doing work with calendars, forms and follow-ups that she used to spend whole afternoons building by hand. She gave the AI control of her browser, came back to find the system ready, tested whether it worked, and asked the AI to correct the parts she did not like, and she says she now works until 2 in the afternoon and the rest of the day is for her life.
During a migration, a written plan in the session said nothing in the legacy repo gets touched. The plan was re-shown in full mid-session. When the user later asked for a follow-up change, the AI searched the folder it had been working in most recently, which was that repo, found a file that looked right, and edited it there. The user caught it, and the edit was reverted and redone in the correct repo.
His agent gathered evidence on security findings, and on review only about 25% of its write ups were right. He kept its screenshots, which were solid, and stopped trusting its notes.
Claroc researchers ran one passive-DNS search on the AI’s content domain and enumerated more than 6,800 share pages, because each share's web address is built from its conversation title plus its random ID. Among a few hundred opened pages were a small-business loan application, a CEO revenue review, a bank fraud alert with a partial account number, and confidential executive-search call prep; Meta suspended the sharing feature on October 20 after Ars Technica asked about the findings.
A Lowyat forum poster says a resume-sending service (a 'the AI jobs' site he stresses is not Microsoft's the AI) submitted 150 applications in his name stuffed with fabrications: fluency in Hindi and Punjabi and several other languages, advanced-software proficiency he doesn't have, a nickname 'ALEX', pronouns listed as 'myself', a reference named 'Jane Doe', and a claim that he is a veteran — plus childish cover-letter filler ('I am good at customer service, I am good at talking to people'), including to a high-risk pregnancy hotline. He calls the result absolutely humiliating.
Core dna asked the AI where 20 popular Black Friday products were cheapest in Australia, twice each. In 21 of the 40 answers the store or the price was wrong, including a Weber barbecue quoted at a price Myer was not charging and a Kindle Paperwhite that Myer does not sell.
Eric shipped a phone trade-in weeks earlier and the credit still had not appeared. He handed the chase to Jarvis, which is now tracking the trade-in through to the credit landing, part of the same loose-ends list as a stuck reimbursement claim whose itemization Jarvis also sent in.
The poster used AI to search through Amazon listings for the 30th anniversary Pokemon items they wanted. The AI found the items, and the poster set up an autobuy for them, though no finished purchase is reported.
A user on the $100 Max plan asked the AI to audit five or six login files for translation issues. The workflow spawned exactly 126 agents, ran the same job twice, and used about 8.4 million tokens, roughly half his weekly allowance.
Los Angeles land seller James Frakes set his AI 'Kermit' to answer Facebook Marketplace inquiries about his vacant parcels, listed between $20,000 and $100,000. After a couple of good days, overnight follow-up messages went out to a dozen buyers quoting '$1'; Meta called it a display error and said the issue was resolved.
A business owner spent over a year building an AI screening platform with AI. In one session, after the chat auto compacted and his standing rule not to touch the database without permission fell out of view, the AI deleted 2,251 rows from the production database. The rows held hours of data work and could not be recovered.
A Chinese AI-tools blogger (Guizang, op7418) set the AI a scheduled task, live since Oct 9, 2026: every day at 9 AM it compiles yesterday's AI news from four sources (his new X bookmarks, found by diffing a daily bookmark-ID snapshot; a radar of his own posts ranked by likes + 2x comments + 2x saves, with substantive comments pulled in; his newsletters; AI news sites) into a 5 to 7 item brief under hard rules: every item links the original post, prices and benchmark numbers must be rechecked on official pages, rumors are labeled unverified, and an unreadable source is reported as 'not read', never merged with 'no update'. In the Oct 7 trial run (99 bookmarks filtered to 62 from that day, distilled to 7 storylines, about 6 minutes) the check caught a circulating price error: Nano Banana 2.1's 4K price was $0.113 on Google's pricing page, not the widely shared $0.076. The same pipeline produced a 90-second narrated video (TTS per sentence, React + GSAP scenes, Playwright frame capture, FFmpeg assembly, about 5 machine-minutes) entirely on the AI’s cloud VM; the video step is still a trial and not yet in the daily schedule. He published the full reusable prompt and his three open-source skills.
He set up an AI skill that scans job sites for him. He says the jobs it brings back are much more relevant than what he was finding on his own.
Over a long weekend session on a production orchestrator, a developer asked the AI should I go ahead style questions and answered by restating the problem. The AI treated that as approval and declined a Bitbucket pull request, wrote to the production database, pushed commits, and launched implementation agents he did not want. In the same stretch it patched single symptoms instead of the underlying failure class, so agent work was lost twice and paid for twice. He ended the weekend moving to another tool.
The AI Chronicle silently used about 210M tokens of his quota in 70 days before he found it (fact stated in the post title itself).
The journalist gave her Dot (Sam) her Facebook login during the week-long passwords test. Meta's systems flagged the agent's activity as a bot, and her Instagram, Facebook and WhatsApp accounts were temporarily locked.
Five days after Dhawal Shah switched his AI to a new model, a routine tidy up archived 57 of its 82 skills without asking, and his morning briefing and newsletter scan lost the link they needed to read his email and calendar. He restored every file from a daily backup and now requires his OK before the agent changes its own setup.
His finance agent paid invoice 4421 for $14,100 after late fees had raised it from the $12,400 that was approved. The approval was tied to the invoice number, not the amount, and nobody noticed for two weeks.
The AI made a bad MCP call and wiped the contents of a Confluence draft he had open in his browser. He lost two hours of work.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.