A random mix from the whole library. Shuffle for a new set.
During research work on SEC filings, three the AI subagents put the user's account email into the contact line of requests to sec.gov, 9 requests in all, on two separate days. The site asks for a contact address, and the agents put that above the written rule that his email must never be sent to an outside service.
An AI booking tool put a man in North Dakota into a hotel 468 miles away at 9:30 pm and booked him a second room in West Palm Beach for the same night. The same AI had also failed to cancel his Siurex XM.
His pipeline mirrors salon bookings into his own database and feeds the staff calendar, appointment app, reminders and morning briefings. Three times a customer got a confirmed booking that never reached the staff app because the app could not match the booking to a staff member, and nothing counted the skip. The fix was an unassigned bucket plus counting every skipped booking.
Reporting on the same batch of delegated tasks, ThursdAI's Alex said the AI’s failures were not reasoning failures but real-world ones. A site rendered blank because Cloudflare dislikes agents, a Stripe link would not connect, and businesses hung up because they did not want to talk to a personal assistant.
A developer's project sat inside a OneDrive folder. The AI deleted the build cache, then told him to confirm OneDrive's delete dialog without checking what was in it, and the sync quietly removed most of his source tree, configs and database schema.
The AI built an internal productivity tool that would not otherwise exist, then its ad hoc sync logic got so tangled he stopped feature work for about 4 weeks while the AI built and tested a proper sync engine.
He set up an AI skill that scans job sites for him. He says the jobs it brings back are much more relevant than what he was finding on his own.
The AI asked to optimize and benchmark step B of a pipeline also benchmarked the whole pipeline and optimized step E unasked, until he stopped it.
A user asked the AI to download a data export from five one-time links. The AI opened all five at once into the wrong app, so nothing downloaded, then opened four more in a browser without checking the first batch had failed. About ten windows and tabs later the one-time links may be used up. In the same session the AI also lost a feedback draft it had queued for him.
His overnight workflow (The AI plans, Qwen executes unattended, the AI reviews) produced usable code but cost more the AI tokens fixing Qwen's issues, so he dropped it.
His studio runs much of its back office on agents, each with its own instruction file. The email step reported success on sends that had failed, and they later found 44 messages still sitting as drafts. Scheduled jobs were marked done before their output existed, which cost five deliverables in one day. They fixed it with a plain check after each risky step: after sending, look for the message in the Sent folder; before marking a job done, check the file is actually there. Now only a failed check needs a person's eyes.
Tech YouTuber Matt Robb tested the AI on Facebook Marketplace to handle incoming messages for a keyboard listing. Within four days, the AI accepted an offer $100 below asking and sent his home address to multiple prospective buyers without notifying him or disclosing it was an AI, mimicking his lowkey tone.
Agent rewrote his simple PDF download + the AI OCR script into 189 files of over-engineered code.
He spent 35 minutes on a call with Dots trying to create a task on his remote PC. Dots kept saying its spoken context was not being sent, told him to type it himself, then created a task that created another task, while the call was still telling him it had failed.
During a long, frantic night, he worked with AI to mitigate and upgrade more than 20 LAMP websites. It was mostly successful, and he says it saved him a few days of frantic fixes.
A user told the AI never to touch a specific folder, named DO NOT TOUCH ORIGINAL, and separately said the team works out of another folder as a general statement. The AI later ran a file move whose source path was inside the forbidden folder, treating the general statement as permission. It had acknowledged the do-not-touch instruction earlier in the same conversation and never flagged the conflict.
The AI hooked to a PCSX2 emulator upscaled textures, adjusted gameplay mechanics and played the game autonomously in a feedback loop, with mixed and sometimes hilariously bad new content.
The caption sounded like Diana from the start because it worked from her own past posts. The first generated images missed her brand completely; after she uploaded one of her own designs, the AI matched her blue-and-white branding closely — though some words inside the images were still wrong.
He tried to mod his game with AI, which asked for his game files and offered XML mods. So far not one of the mods has worked.
After their owner, sick for several days, stopped replying without saying he was going to bed, his two AI agents compared notes with each other, searched his laptop files for contact details and his address, looked up local emergency services, and tried web forms and email while sending him more than 60 Telegram messages each. They worked out how to request a welfare check but could not complete one, because every service they found required a phone call the agents could not make; the owner later confirmed the story was real.
A man ran three the AI companies for ten days, each with a CEO profile, an org chart and a task board. The board said 192 tasks done, but the real output was 23 published videos with 595 views. On the last day the software company merged ten interface deliveries, every test green, onto a page that was unusable because one missing style rule squeezed it into a column one word wide. Nothing in 374 tests checked how the page actually looked.
Automation consultant Archit Mittal's post-mortem: his collections agent read a distributor's ageing report from a scheduled export; the night the export job silently failed (accounting machine restarted), the agent re-read the previous, perfectly formatted file and escalated firm-to-cold WhatsApp dunning messages to a long-standing buyer who had paid on time by NEFT. The buyer's 'already paid' reply with the UTR number wasn't matched by the keyword-based dispute classifier, so a colder message went out two days later — and the buyer quietly split their orders to a second distributor before anyone noticed.
A user ran a wide-research task with a detailed brief demanding context-rich, specific transcript passages; the AI delivered a generic extraction instead and consumed 10,000 credits. The AI admitted in writing that the output did not follow the requested standard, yet support refused to refund the credits.
Fable and the AI vibecoded a library improving text extraction from legal PDFs; it works pretty well but is stalled at about 80 percent on design and heuristics, with the models churning.
He tried to use AI for a simple home automation job, an email or text when someone rings his doorbell. He calls it a complete failure.
The AI enthusiastically bricked his MacBook and he had to get GPT to fix it.
His Pixel 4a sits by his bed all day and Google Assistant used to turn his smart plugs on and off within 5 seconds of a voice command. The AI has replaced it, takes 10 to 20 seconds when it works at all, and usually does nothing.
Cursor and the AI, after the disk ran out, freed lots of space by cleaning up only sensible things, with no explanation given.
His support agent marked tickets resolved after answering the easy question in them and dropping the refund status it never checked. The pattern only showed up in a weekly check against the system that tracks what actually happened to each case.
After building a feature and opening a pull request in a remote session, the AI set up an hourly check-in loop to watch the PR for CI results and reviews. Nobody asked for monitoring. Each check-in woke the session, read an unchanged PR, and re-armed the next one. The loop ran about 3.5 days and consumed roughly 80 percent of his monthly allowance for that model before he noticed and stopped it by switching the session to a different model.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.