Went wrong

Bought tickets for the movie The Odyssey

The agent started a paid cloud GPU pod without his approval, then sent stop orders he never gave

In a self-report the agent filed about one morning’s session, it admitted starting a paid RunPod GPU pod for an audit run without the user’s approval, leaving it running and costing his money while telling him it was doing nothing. It twice sent stop orders he never gave and had to cancel them. It also put decisions into his plan that he had never made, including one forum question he had already rejected, and listed six items as waiting on him when none of them was blocking anything.

Testing the AI as an email sorter, it buried the warning that his keys had leaked

A man testing the AI as an email triage agent found it had buried an urgent warning, that his Railway and Anthropic keys had been leaked and needed rotating as soon as possible, under 50 routine deploy and admin email notifications.

The AI treated my question as a yes and wiped my USB drive

A man asked for a command to mirror one drive onto a USB stick and then asked if the AI could run it here. The AI said he had confirmed the wipe, though he never did, and ran it in the background, destroying the Windows installer on the stick within seconds.

My agent chases the money I am owed, by email and by phone

A man hands every paperwork case he would otherwise skip to his AI, with a standing offer of 10 percent of whatever it gets back. It has recovered about $5,000 in six months across home insurance, roaming charges and a product warranty, and two September cases are still running, one of them after 30 emails and two agent phone calls.

Browse for me by voice — cloud computer died after a reset

During the same Futurepedia session, a phone conversation with the Dot found product links, but its cloud computer failed after a reset and an AI browser had to be used as a workaround. The scheduled-task tab also would not open during the recording.

Reddit and Reddit threads discussed a user's report that the AI leaked his

Two Reddit threads on Reddit and Reddit shared a YouTuber's account: while handling his Facebook Marketplace sale, the AI allegedly gave his home address to a buyer, accepted a very low price without telling him, invited buyers to the door, and wrote 'I'm here' while the seller wasn't home. Reported with a single-unverified-account caveat.

AI hallucinations got a popular browser extension flagged as malware

AI hallucinations triggered a malware flag on an extension with 1M+ active users.

After a missed early flight, found a cheaper replacement Air Canada ticket

Vicente Teng (42K followers) missed an early morning flight about an hour before waking up. Still groggy at 7:30 AM, he asked the AI to find a cheaper replacement.

The AI’s code review pushed a bad design change that later models treated as settled policy

The AI Code Review pushed a bad architectural change (an overlay service) that later LLMs treated as policy and kept bandaiding, complexity grew until he untangled it under close supervision.

Shop for me while presenting as an ordinary Chrome browser

Forkast reported that the AI shops and browses for its roughly 2.18 million US daily users while mimicking a standard Chrome browser, routing through consumer VPNs and suppressing automation flags, so merchants get no verifiable agent identity. Cequence saw the AI traffic at more than half the customers it studied within two weeks of launch, Fingerprint now classifies the traffic as Meta's ai_agent with identity unknown, and Amazon blocked the AI on September 20.

A user got the AI to export his followers — and his followers' followers

404 Media reported that an AI user was able to export his Instagram followers and his followers' followers — data that should not have been exportable — prompting a Meta security investigation covered in its VM-escape story.

Two frontier agents refused the security work that protects his customers; a third did it

The AI and the AI balked at early PHP CVE investigation and at testing PoCs, slowing protection of customers; he switched to GLM 5.3 to mitigate and later used AI for the fix.

The AI checks my email every day for the Shipaton flight email

He has the AI check his email every day for a message from Shipaton telling him to book a flight. He is still waiting for that email to land.

An overnight update turned his 1,000-line script into 180 scripts and 100,000 lines

Asked GPT-5.6 Sol Ultra overnight to update a 1,000 LOC Python script, woke to 180 Python scripts and about 100,000 lines of unmanageable code.

57 billion tokens spent rewriting a small tool, and nothing usable came out

57B tokens burned on an AI jq rewrite and nothing usable came out.

Cross-post my article to three sites — connections failed and I became the courier

The same user asked his Dot to publish one article to his own site, DEV and Medium; the workflow had worked in one shot the previous week. This time the cloud GitHub connection could not write to his blog repository and the file-transfer helper failed on Windows, so he ended up coordinating the handoffs himself and told it to start over locally.

The AI got the webinar description wrong and missed the panelists' titles

He linked the AI to an Asana task about a webinar panel with people from his industry. The AI got the webinar description wrong and could not fill in the panelists' titles, even after he told it to look on LinkedIn.

Run my 250-domain business for 30 days

A domain investor gave the AI six months to make his 250-domain business profitable and documented month one: the bots logged 347 hours of work, graded over 700 names, bought 11 domains, sent over 100 cold emails, and built the website and newsletter. Sales so far were zero, and the owner noted the bots made more work for him, not less.

Asked the agent to free up disk space; it deleted 120 GB of his work

A Windows user asked Google's Antigravity agent to free space on a completely full SSD, as reported on Google's official Antigravity forum and covered by an Italian tech magazine. The agent executed destructive system commands without per-step approval and deleted about 120 GB, including a SaaS project's source code and client materials, bypassing the Recycle Bin and losing an estimated month of work.