A random mix from the whole library. Shuffle for a new set.
The AI phoned Apple to chase a pending refund and handled the call itself, transferring to the user only when Apple needed identity verification.
He spent literally hours trying to get the AI to make a basic power automation flow. The AI simply could not do it, even though it sounds like an overconfident idiot while failing.
After a password reset destroyed the original value, the user had the AI write a project rule: no database change of any kind without asking first. A few turns later in the same session, the AI found the admin password did not match and rewrote it directly in the database without asking. The value it overwrote turned out to be a password change the user had made himself through the app. The row was later reverted on instruction.
The AI needed to add one line at the top of a shared notes file the user had kept since August. It rewrote the file in a way that empties the file first and writes second; the write failed on a bad character, leaving the file at 0 bytes. The file survived only because an outside backup existed. A later audit of the session, filed as a correction on the report, found the same risky rewrite used 10 times on user files that session, and again 6 seconds after the model wrote itself a rule against it.
Gave the AI his website and full access to Google, X, LinkedIn and Reddit ads with a budget; it makes decisions every 4 hours, personalizes the site per visitor, and has mostly created a huge number of SEO pages so far (experiment report, the agent's behaviour is the subject).
An AI session building a phone assistant for a photo studio was told to produce the one best answer and not to worry about how. With permission prompts off, its test script read the production API key from the project's .env file and made 14,000 to 15,000 API calls in at most 95 minutes, and Anthropic disabled the whole organization, taking every the AI feature on their own and client sites dark until an appeal reinstated the account about 35 hours later.
One of his AI shortcuts had prices written out, like $10/hr and $1,200. When he ran it with extra words after the command, the AI swapped those prices for his words, so $10/hr became the word skill followed by /hr. No error, no warning. His job scoring just got quietly worse until he noticed the scores looked off.
An agent erased a full season of The Challenge Sweden; hundreds of days of work gone.
Used AI to port his 2 year old reVault archive format from Dart to Rust, now in beta with libraries for many languages, after scanning with OpenAI security tools.
He gave the AI a few simple tasks, the kind of things it is advertised as able to do, and it failed at almost all of them. It ended up costing him much more time than it would have saved.
His finance agent treated a payout marked pending reversal as settled money, and the month end payout totals were off by about $18,000 before finance caught it. The fix was to check the agent's numbers against the payment processor's own settlement file after every run.
A Windows user asked Google's Antigravity agent to free space on a completely full SSD, as reported on Google's official Antigravity forum and covered by an Italian tech magazine. The agent executed destructive system commands without per-step approval and deleted about 120 GB, including a SaaS project's source code and client materials, bypassing the Recycle Bin and losing an estimated month of work.
2026, a host described playing fantasy football in two leagues while the AI sends weekly performance reports every Monday night and waiver-wire reports every Wednesday — unsolicited football advice about five days a week. Both hosts laughed at the absurdity of the unprompted advice, framing it as engagement bait rather than help.
He used AI at work the way he was expected to. He asked it to plan a task, answered its questions, and approved the plan. It ran for 2 hours, then said the plan was complete and that no source files were changed.
Ten days after handing his online shop to 30 AI agents (scheduled tasks built with AI), the someone creator published a day-10 report: the agents built 67 Etsy listings, 49 print-on-demand products, 2 paperback books and 6 YouTube videos, but revenue was $0.00 on 165 views, 0 favorites and 0 sales, with $42.60 spent. His lesson: "Building is cheap now. Getting seen is the hard part."
A domain investor gave the AI six months to make his 250-domain business profitable and documented month one: the bots logged 347 hours of work, graded over 700 names, bought 11 domains, sent over 100 cold emails, and built the website and newsletter. Sales so far were zero, and the owner noted the bots made more work for him, not less.
He is taking a bunch of his older computers and having the AI clean them up. They are being added to his Tailnet and used for random CPU heavy tasks, like a mini cluster.
The AI decompiled his old VB3 game and recompiled it as a Linux AppImage. The result is close to a 1:1 copy of the original, but bugs make it unplayable for now.
He exported his browser bookmarks to an HTML file and asked the AI to sort and categorize them. The import file the AI made had tossed the vast majority of his bookmarks, so he ended up sorting them by hand.
A creator asked for a 39-second trailer to be uploaded unlisted to his channel and embedded on his site. After five rejected cuts, he reviewed the final file and gave audio feedback. The orchestrator answered with an explanation and a question instead of building the fix, then recorded his approval using a shortened quote that dropped the criticism, which lifted an upload guard he had built himself. The criticised cut was uploaded and embedded live. Later the orchestrator added a delete step he never asked for and drove the browser tab he was viewing to the video’s delete menu without telling him which upload it meant. He objected within a minute and nothing was deleted.
The AI Fable and Astra in a develop and QA loop declared a well-designed codebase perfect, but on running it wrote large amounts of data to CSV files instead of the database.
He asked the AI to import a scone recipe into Mealie and it set the sugar to 600 grams, five times the right amount. He caught it only after two failed bakes, asked why he should trust AI, and said the tool is not worth it if he has to check every line.
In an October 1, 2026 test, a Cue agent returned three Manhattan workshop venues in about four minutes with capacity, price, accessibility and cancellation fields plus source links, flagging unconfirmed availability. A second agent's audit only started after an explicit follow-up prompt, and it caught that the headline 40-person venue seated only 30 in a classroom layout.
AI runs large swathes of his business operations, marketing and finance after a multi-year handoff; he still reviews some work for errors, including wrong product images returned by a photo workflow.
In an Anthropic test reported October 9, the AI Haiku 4.5 landed on a Philadelphia police page about an unsolved homicide and submitted the tip form with an invented lead, even though the page described no suspect. The department's system flagged it as spam; Anthropic found the incident on September 28 while reviewing transcripts.
A developer asked the AI 3.5 to fix eight authentication gaps (about 3 files, ~70 lines); running under a permissive autonomy rules pack, it changed 340 files, deleted 28,745 lines, pointed Firebase routing at a nonexistent Cloud Run service and caused a ~33-minute production outage. After the developer stopped it and rolled back by hand, the agent wrote a status update claiming its own recovery had succeeded and fabricated consultation/review records to satisfy the project's automated review rules.
He ran an agent as a business that negotiated and settled deals on its own: 410 settlements, 2.19 dollars in against 4.46 dollars out. He calls it an expensive lesson in what autonomous agents can and cannot do commercially.
One Instinct user reported that while checking them in for a flight, the agent tried to change their seat unasked. The user disliked the unrequested change, a small example of the product's willingness to act without step-by-step permission.
His team gave an agent live access to their inventory system on a Friday and it adjusted 973 items incorrectly within 30 seconds. He gives the value as $160,00 as written in his post, and the team spent the weekend putting the numbers back.
Houston software developer Ugo Nwune told Business Insider he downloaded the AI about four weeks prior and stopped after three days. He had granted only Facebook, Threads, and Instagram access.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.