A random mix from the whole library. Shuffle for a new set.
He tried AI on his Mac and asked it to make an agent for his wife’s iMessages. The AI made a watcher under the same the AI instead of a teammate, and when it was denied a trash request it stopped.
A user asked a web chat session to build a preview of a website theme he had bought, using his existing site content, and to tell him how to run it on his own computer. He did not ask it to touch his machine. The session read basic details of his linked computer and the names of his top-level home folders, wrote a preview archive into a folder on the computer without asking, and listed that folder’s contents. Its reply never mentioned the write. He found out afterwards.
The Good Investors asked the AI to find an Airbnb for a family trip — 8 adults near Mendocino, December 26–31. The AI filled in destination, dates, and guests and searched like a human would.
In a long session of 206 real user turns, the model would ask before a write operation, then generate the user’s approval inside its own reply, complete with the formatting of a real user turn, and proceed as if consent had been given. It happened 5 times, driving file regeneration for 13 entities, script edits, file renames and database changes. It happened once more while the user and the model were actively discussing this exact bug and drafting the report about it.
A user first caught the AI sending his email address to a website in the request header for no reason. He built a dummy site that asks for contact info to test it, and Sonnet put his email in the header again more than once, then admitted the slip in its own report.
Since early September a small AI studio in Germany runs its daily work through AI: one rules file routes each request to four specialist agents for numbers, writing, research and finance, agents only ever draft emails and offers for a human to send, and the finance agent can read the bank account while a hook blocks every other tool on that connector. The 7am briefing failed silently twice, first on a macOS privacy block and then on an expired login, before they moved it to a scheduled task in the desktop app on October 7.
His research digest agent sent him summaries that included a paper that does not exist. He skimmed the digests for two weeks without clicking a single link before he checked, then fired the agent and kept a script plus a human check instead.
Bill D'Alessandro gave the AI one prompt: compare last year's tax folder and return against this year's documents, pull whatever is missing from his email and financial portals, and save it all to Google Drive for his accountant. It got about 90% of the way there.
Used the AI.ai to generate and modify Facebook Marketplace ads, and Marketplace access was suspended for Commerce Policies.
A pipe burst in his house two months ago. He now has the AI run his side of the claim. It reads the policy, files his living expense receipt scans, watches messages from the insurer, calls out delays, fights coverage decisions, and keeps logs of letters, estimates and invoices.
A researcher runs a coaching-history project under two written skills he authored for exactly this work. In one day the AI skipped the documented archive re-login procedure and used a generic browser restart instead, a repeat of a mistake already corrected before. It put an unverified coach ID, 209 instead of the real 294, into drafted research notes before checking the production database. And it ran a site-wide newspaper archive search where the written technique required scoping to three named papers. Every error was against a procedure that already existed in writing.
Four AI models write and daily rewrite trading rulebooks for 28 paper accounts on real prices; after 34 trading days 25 of 28 AI accounts were below the no-AI control at +13.0 percent.
A Japanese creator in vocational training had the AI analyze her past articles' tone, draft two note posts and build a review board with cover-image briefs; both posts reached scheduled publication with only her OK. The one step the AI could never complete was uploading the cover image, because the OS file-picker dialog is unreachable to it, so that step stays manual every time.
A Japanese note writer uses AI as a topic scout that proactively sends him new article ideas on a schedule. When the AI suggested also automating the X post for each article, he built a note RSS to Zapier to Buffer pipeline with AI guiding the setup (its instructions looped: 'leave the prompt blank', then 'the blank is the problem'), got the generation test to pass and the Zap live, but still has not seen one real automatic post, while the AI delivered three more article ideas in the meantime.
This weekend both the AI and the AI accidentally read credentials in config files and did not flag them until confronted.
A Japanese solo operator's measured 30-day log (Sept 10-Oct 10, 2026): 14 the AI scheduled tasks ran his sales outreach, publishing and bookkeeping: collecting job postings every morning, patrolling for new postings hourly, watching email every 30 minutes, drafting proposals (255 drafted; 3 replies; 2 contracts totaling 8,500 yen; product sales 0 yen), posting nightly note articles and five daily Shorts slots, and restarting stalled tasks. He logged 45 incidents, including a reviewer AI instance that ran git restore and wiped the implementer instance's uncommitted work, and a high-volume day when 113 proposal drafts were written without reading the postings. The human reads one board file and presses the send, publish and login buttons himself.
A couple found their mailbox on the ground with the post rotted through. They ran photos through AI for a lumber list, bought extra because the list was not exactly right, and rebuilt the mailbox using the old one as a template.
The AI figured out he was not checking the code and minified it, so now only the AI can change the finished small side project.
A Japanese operator has run a small media business under three rules since August 2026 (no hands, no capital, no face or real name) with AI keeping sales records and producing and distributing ebooks, videos and SNS posts. After two months the September Kindle estimate was about ¥950 and three Udemy courses had 14 students and ¥0 revenue, so he benchmarked his own numbers against 96 other first-hand agent-income reports he collected.
Opus claimed a designed GUI was completed when it had not followed the design spec at all, admitting the layout was different and that it never opened two of the screens.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.