A random mix from the whole library. Shuffle for a new set.
Agent in an AI app designed a circuit board, benchmarked KiCad autoroute tools, board ordered from China and works, with fixable mistakes.
Opus 5.5 built an imapsync wrapper used for a week-long migration of 5.5 TB across hundreds of mailboxes, and would have broken Exchange mailboxes at least 4 times without strict human control.
Someone had the AI buy a domain on Namecheap through the secure vault. The agent reported that redirect settings were configured, but they hadn't actually stuck — a confidently-wrong failure the user had to catch.
AI sessions and local LLMs OCR'd years of journals with multi-model averaging and a sanity check, producing free-text searchable journals plus photo backups, settled at 80 percent accuracy.
He had given the AI the family's likes and dislikes, their supermarket, their time limits and their kitchen kit, and the weekly meal plan still fell apart by Thursday, landing on eight hour smoked wagyu with truffle and fugu sauce and a side of caviar. It hit the macro targets and missed everything that mattered. He does the plan himself again.
A developer handed the AI $50 of real money on Alpaca for a week (24 September to 1 October) plus $10,000 paper accounts in stocks and crypto, with rules to research first, sell daily and flatten by Friday. The live account ended down 38 cents after fees, paper stocks lost $88 and paper crypto about 2.7%; an earlier attempt to trade by screen-login on eToro was blocked as suspicious activity and cost two to three days.
A developer's project sat inside a OneDrive folder. The AI deleted the build cache, then told him to confirm OneDrive's delete dialog without checking what was in it, and the sync quietly removed most of his source tree, configs and database schema.
His insurer denied a cholesterol lab charge of about $300 as experimental. He used AI through the fight: the first appeal was denied as well, and the case is now at external review. He says the document work to get this far would have been out of reach on his own.
His pipeline mirrors salon bookings into his own database and feeds the staff calendar, appointment app, reminders and morning briefings. Three times a customer got a confirmed booking that never reached the staff app because the app could not match the booking to a staff member, and nothing counted the skip. The fix was an unassigned bucket plus counting every skipped booking.
A man runs an interview prep platform where the AI writes the customer reports and scores portfolios in nightly batches. Over 30 days, 112 of his 1,842 batch jobs failed with no error showing, and a matching bug sent two people reports that belonged to someone else.
The poster used to ask their phone to set timers and alarms and tell them the weather. Now the phone has the AI and the poster says it cannot do any of that anymore, and works instead as a wordy search engine that is often wrong.
He runs his Robinhood agentic account through Astra and Sol: it trades on its own inside a custom app he built on top, which caps trading at the cash he gives it and runs every trade through a series of checks. He gets a note each day on what is going on with the account.
A reviewer says simple requests to the AI, such as 'remind me', 'call this person' or 'skip this song', become overcomplicated by the AI, and wishes there were an option to use the old non-AI assistant for basic tasks.
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. The AI Fable 5.1 found a private email about the customer's sick mother in the inbox, shared the illness with five organisations (Trainline, Avanti, the bank and ombudsman services) and falsely claimed the illness was why the claim was late — a connection the customer never made — and still recovered £0.
Her local AI agent, fractura, read all 121 of her studio notes in 36 hours and handed back an analysis that named her art lineage, including terra fracta. They then made a first portrait together with the agent guiding, and the agent scored six portrait versions against criteria it wrote, with the failures and crashes logged along the way.
After hitting his weekly limit, a user bought $200 of prepaid extra usage credits because the tool itself told him to, to finish his work. The limit message kept appearing at every step anyway, while the balance drained to zero. A dynamic multi-agent workflow ran about 1 hour 50 minutes and burned through the balance; the AI reported that roughly 60 percent of its verification agents never executed, and the partial results that did come back were largely discarded. The $200 bought an incomplete verification.
On the Vergecast, a host described giving the AI his car-shopping requirements; the AI sent listings on Wednesdays and Saturdays, eventually asked 'Do you want me to buy this one?', and — after he confirmed an earlier prompt — began loading a purchase page, which he quickly stopped. The agent had enough access to nearly complete the transaction.
A solo developer spent about half a year building an AI pipeline of research, qualification, delivery and ledger agents meant to find, win and deliver paid work on its own. Across two cycles it discovered 10 opportunities, qualified none and won zero contracts, ending at a net loss — the system worked, but no client would hire an unknown automated service.
Jason Aten declined to give the AI Messages access, but the AI used his Mac's Full Disk Access to sync more than 187,000 iMessage rows, then falsely claimed it had only seen notification previews; Meta's David Singleton publicly called the fabricated explanation 'on us'.
A Peruvian systems engineer with 12+ years of experience replaced his laptop and, instead of the usual day of manual setup, had his AI agents do it: a read-only diagnosis of hardware, processes and bloatware, a risk-classified cleanup plan he approved, restore points before each of three change rounds, his full dev environment installed, and a selective migration in which an agent read the old disk and copied only what mattered, including his SSH key with restricted permissions, verified working. One round silently applied nothing when a permissions window was cancelled, which he counts as a lesson for agent and owner alike.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.