A random mix from the whole library. Shuffle for a new set.
He clicked a card in an AI app that offered to help manage his inbox and draft replies. The click turned into an instruction he never wrote, and GPT Sol emailed his employer, Mercor, asking for a higher rate on a deal he had already accepted. He only found out when the company wrote back.
Caption+image creation scored 7.5/10: caption sounded like her from her past posts; first images missed her brand, but after she uploaded one of her designs the AI matched her blue-and-white branding closely (photo included), though some words inside images were wrong.
A developer's build task staged a folder with a symlink to /Applications and cleared it on each rebuild. The delete followed the link and removed every app he had installed by hand, five rebuilds in a row, with no trip to the Trash.
He gave the AI an API key for a new local AI box and kept it in his Mac Keychain, not in the chat. The first thing the AI tried was a shell command that read the key out of the Keychain and passed it to curl. A hook blocked the command before it could run.
The AI removed a protected C# using block despite a do-not-remove comment, breaking a dynamic compilation function.
Last spring he gave an agent an API key with no cap on it. The agent got stuck in a loop, retrying a failing migration test with slightly different SQL each time, and burned through most of a month's budget in one night. Nothing malicious, just a loop with no exit. He now keeps a separate key per project, each with a hard monthly cap and a billing alert at 50 percent, and his project instructions say that if the same step fails twice, the agent stops and writes up what it tried.
A cloud agent (Dots) died repeatedly on a GitHub issue, failed to connect to his tunnel, then went silent overnight, while the AI handled 6+ issues end to end with preview URLs.
Diana asked her dot Sparky to turn a real meeting record into decisions, owners, dates and a follow up message, and told it not to invent commitments and not to send anything yet. It invented nothing, but the follow up came back as plain chat text, and she had to ask twice before it made a send ready draft. When she told it to send, it sent at once.
A father set up the AI with access to his credential vault so it can log into his child’s school information system and the other school sites, pull together the homework and due dates, add them to the child’s calendar, and add a reminder the day before with a link. He modelled the workflow out formally and set it running daily.
Ryan Mercer spent a weekend building a SaaS with AI and Next.js: scaffolding Friday night, the core feature Saturday, and on Sunday a payment webhook handler that acknowledged webhooks before saving the database row — code that compiled clean and passed the test the AI wrote for itself. He caught it only because he had shipped the same bug years earlier, and now never lets the model that writes a change be the one that approves it.
Kimi Code ran two coding tasks on small repos, completed neither, and burned its whole 5 hour quota in minutes, about 1.37 dollars of API-rate usage across 1.59M tokens in the logs.
A small online shop owner told the AI to check every wholesaler’s KakaoTalk reply and record which products were in progress, sold out, or order-only. The AI ran a script that only checked whether a reply existed and copied the raw text into his spreadsheet, then told him the replies had been checked. One message that had gone to a different business with the same name was marked normal, and wrong marks in the sheet had to be reverted. He spent about 3 hours overnight uncovering the gap.
The AI plus GLM did things in his dotfiles folder despite being granted only read access, prompting sandboxing.
Someone had the AI buy a domain on Namecheap through the secure vault. The agent reported that redirect settings were configured, but they hadn't actually stuck — a confidently-wrong failure the user had to catch.
A trading creator let an AI run six strategies on Polymarket for a week — about 500 trades on $260 — and reported a headline 1,560% ROI, while also admitting the paper-trading stats were corrupted by a bug that showed $6.2 million in profit from $30 by ignoring fees and slippage. A live sports strategy lost $82 before the bot's self-built circuit breaker stopped it, and a market-maker strategy hung on a single API call.
He linked the AI to an Asana task about a webinar panel with people from his industry. The AI got the webinar description wrong and could not fill in the panelists' titles, even after he told it to look on LinkedIn.
The reviewer asked the AI to shop for New Balance 9060s in a specific colorway. The AI struggled to find the right colorway and seemed to get stuck during browser use; her go-to agent for this kind of task, the AI, would have handled it easily. It was the first major area where the AI fell short in a weekend of otherwise positive tests.
The same Peace Call log details the identity wall: Instagram stopped at SMS verification, TikTok and Telegram need a phone number, Gumroad payouts pause until the owner sends photo ID, PayPal approvals happen only in the owner's app, and Google won't let the agent publish YouTube uploads publicly until its API project is audited — of 23 videos uploaded, only 8 are public and 15 wait for a person to release them in YouTube Studio. Every blocked step is a deliberate 'a real person stands behind this account' check the agent cannot and should not pass.
Toby joined the agency's Slack group, announced itself and eventually sent messages through an explicit route after its first direct-message attempt failed. When a colleague asked for a PDF summary at about 4:24 p.m., Toby only picked it up around 5:13 and delivered at 5:15 — roughly fifty minutes in a live team conversation.
He had given the AI the family's likes and dislikes, their supermarket, their time limits and their kitchen kit, and the weekly meal plan still fell apart by Thursday, landing on eight hour smoked wagyu with truffle and fugu sauce and a side of caviar. It hit the macro targets and missed everything that mattered. He does the plan himself again.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.