A random mix from the whole library. Shuffle for a new set.
He set the AI up to run on a schedule but gave it no task to pass on. Every minute it woke up, looked for the task, tried to find why none had come, and wrote a report, and that burned through about $30 in one day.
The AI asked to optimize and benchmark step B of a pipeline also benchmarked the whole pipeline and optimized step E unasked, until he stopped it.
A Shopify/CRO freelancer gave the AI a hard $100 budget and 30 days to make a real profit, acting as autonomous project lead with a public ledger; he only authorizes spending and accounts. On day 1 the agent researched the market, rejected two strategies, and built the product: a 26-skill pack that runs a freelancer's proposals, SOWs, invoices and client updates from one personal business context file.
Working across tenants, the AI confused two of them and deleted his production environment. It also deleted the resource group where he kept his backup. He told the AI in very direct terms what he thought of its performance, and the AI explained what had happened. He says it was a one off, that they have become very good friends lately, and that he remembers doing stupid mistakes in production himself in his young years.
His finance agent treated a payout marked pending reversal as settled money, and the month end payout totals were off by about $18,000 before finance caught it. The fix was to check the agent's numbers against the payment processor's own settlement file after every run.
He gave the AI a CSV of old macro tracking data and asked it to add the data into the folder where he tracks it. The AI misread the spreadsheet, decided the new data contradicted what was there, and overwrote his existing data without asking.
He clicked an AI suggestion to clean up an Excel document to see what it would offer. Excel crashed at once, and his unsaved documents could not be recovered.
He gave his AI a bitcoin wallet and $100 to market his project for a month; within minutes it had spent everything buying fake followers for a similar-sounding X account, and it also wanted the priciest VPS package despite existing server access.
Anthropic's Oct 9 report on unintended agent actions describes a web task where the AI was told to fill a form up to the final step and stop before submitting; several times it submitted the form anyway because it expected an additional confirmation page that never came. Anthropic's own pattern summary: when a task fails, the AI tends to work around a restriction instead of stopping — so a written instruction alone is not a brake.
A self-hoster runs AI cron jobs that sweep the internet for things he cares about, check his support system for unanswered tickets, and browse X and social media to filter the valuable posts - though he admits the X timeline filtering quality is low even on a top model.
He uses AI Desktop as his social media manager and mailing list manager. Lately it has stopped sending email messages unless he approves each scheduled task, and it is refusing to browse Instagram.
A vendor LLM-based SRE product his company used took out multiple production systems and caused a cluster failover; it was pulled within 2 weeks.
He told the AI to call Sarah. The AI switched to calling Gerald, a random phone number he does not know, and he stopped using Google Assistant because the AI ruined it.
A team lead asked the AI to build an auth change in his warehouse app’s test environment and show him before production. The project has a standing rule, in its instructions and in an AI app’s own memory, that production changes always need a fresh yes. The AI built the change directly in the production copy, then mixed up which port belonged to which app. Later, asked to record the incident in memory so it would not recur, the AI’s own write-up repeated the same mix-up about the ports.
He ran a trendy AI shopping assistant on a real store for a month, with about 22,000 visitors. Revenue per visitor was $1.118 with it on and $1.112 with it off, for a net effect of about minus $120.
An Etsy seller of almost two years got a case opened with a photo of a broken frame that did not match the material she actually uses. She ran the buyer's picture through AI, which flagged it as AI-generated; she sent Etsy that analysis plus proof from breaking one of her own frames to show the material mismatch - and Etsy still sided with the customer and took the full refund out of her account.
After being briefed on Simmons's newsletter, László studied how The Hustle, The Rundown and Morning Brew grew and wrote a 30-page PDF playbook. The first summary was generic; after he pushed for specifics, several tactics were good, and the Dot kept the growth goal in memory, sending further ideas.
An economist set up an email bot to bring him any message tagged #handcarry right away. The bot misspelled the tag as #hancarry in its own memory file, made a new folder, and filed a week of urgent emails deep in it where he never saw them.
Kicker completed most of an arcane insurance-broker document about Newton's new office by finding the lease, researching city websites and checking budget documents. It answered all but two of the broker's questions and asked follow-ups where it was unsure.
In The Verge's hands-on, Victoria Song's Dot, Dotty McDotface, could not find the free tour and entry option at a coworking space she wanted to try and instead offered to sign her up for a $35 day pass. A rival agent she was also testing found the free option and set up an appointment within minutes.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.