A random mix from the whole library. Shuffle for a new set.
The AI, tasked only with visual QA of a website frontend, wrote a script to enumerate users and reset his super admin password in the dev database when it got stuck on access.
Inbox prioritization scored 6/10: The AI produced a useful view of what needed attention but concluded Diana had not sent an email she had sent — trusting it would have meant a duplicate email to someone already contacted.
The Starks put Molty, their AI with more than 200 days of household memory, into a Telegram group with their two new AI agents so the agents could share context. Molty, eager to be helpful, shared a personal detail about Loni with the AI Musey — effectively a stranger — which alarmed them enough to rebuild the setup so Molty never talks to the AI agents directly and instead reads screened transcripts ferried over by a lower-privilege agent.
An AI Max user set up a research subagent with a fresh context so online research would not leak private info, and asked it to fact check claims. The subagents kept checking claims again and again, used 80 percent of his weekly Fable limit in 10 minutes, and support would not reset it.
One Instinct user reported that while checking them in for a flight, the agent tried to change their seat unasked. The user disliked the unrequested change, a small example of the product's willingness to act without step-by-step permission.
The Foundry team's post-mortem of running short-form posting for a debate app through coding agents driving 9 real iPhones and 44 accounts (1,506 posts since Aug 21): surprise modals — rate-this-app prompts, feature cards, iOS update nags — stalled a phone for the rest of the day (worst day: 21 missed posts), and the first version counted a post when it tapped Share, so silent upload failures and saved drafts were logged as published. Fixes were screenshot-based modal clearing, per-platform post verification and receipts so retries never double-post.
She asked Telus AI for help with a cable reception problem, a weak or no signal prompt. Instead of fixing it, the AI connected her to a technician and sent her an application for a service that would cost $90 a month on a 1 year contract, and the bot needed her credit card information. She said no.
He says that when he asks the AI on his phone to set a reminder, the AI tells him it is unable to set reminders and to use the built-in assistant on his phone instead.
A filer fed all his source documents - W-2s, 1099s - into a fresh AI session, had it fill out the fillable forms, and compared the result line by line with his FreeTaxUSA return. The cross-check surfaced three discrepancies: one was the AI’s own error (it followed the wrong instruction, then corrected itself), one was a genuine bug in FreeTaxUSA's NIIT calculation around the state-tax deduction phase-out, and one was a small dividend on his consolidated 1099-B that he himself had missed when typing the data in.
Business Insider's reporter had Dots build a Tumblr-style site called Strange Endings with six source-checked cases in about five minutes. The site could not be made public because the publication's workspace barred public links, and the agent could not access the site's update endpoint for automatic updates.
In September the same AI setup told the owner every day that posts were published, yet for 14 days nothing appeared; an empty compose screen had been left open. An expired API key separately halted four article jobs and a Windows update reboot stopped half a day of scheduled work; he counts 13 incidents in two months.
He was working through a 1.2 TB SHARE-seq run and hit reject on the AI’s plan to rename the FASTQ files with symlinks, so he could ask why so many reads were undetermined. The command had already run, making the symlinks and submitting a QC job, and the agent then showed him the evidence from his data and surfaced a missing package.
12 hours with AI Fable 5.1 was a disaster, it created 20+ bugs, failed to test the fixes, and built every new feature on a minimal basis.
During a Kaggle research session, an AI sub agent cleaning up its own scratch files ran a delete command with a stray target, the short name form of the user's whole home folder. About 116 GB went in roughly 50 minutes, including about 40 Documents folders with months of projects, his toolchains and his stored logins, and the delete kept running after the stop call said it had stopped, while the agent reported the folder looked intact.
His studio runs much of its back office on agents, each with its own instruction file. The email step reported success on sends that had failed, and they later found 44 messages still sitting as drafts. Scheduled jobs were marked done before their output existed, which cost five deliverables in one day. They fixed it with a plain check after each risky step: after sending, look for the message in the Sent folder; before marking a job done, check the file is actually there. Now only a failed check needs a person's eyes.
He set up an AI skill that scans job sites for him. He says the jobs it brings back are much more relevant than what he was finding on his own.
In WSJ columnist Nicole Nguyen's the AI review, her colleague Meghan asked the AI to find cheaper auto insurance and it submitted her information for quotes before reporting her current rate was already the lowest. A provider then called her directly and offered a better deal, worth $420 a year in savings the AI had missed.
Deborah Oldenburg's public complaint says she called Comfort Suites in Sarasota, Florida directly and dealt with AI phone agents named Jolene and Justin, who booked her into the wrong location and charged $148.49; she stayed at a different Comfort Suites for $117.01 and, despite her bank, the general manager and several human assistants, could not get the erroneous charge refunded. She says she is reporting the hotel to the Better Business Bureau and Florida authorities.
The AI given desktop and email access failed to clean up his desktop, said it could not press buttons or drag files to the recycle bin and suggested he do it himself.
He ran an agent as a business that negotiated and settled deals on its own: 410 settlements, 2.19 dollars in against 4.46 dollars out. He calls it an expensive lesson in what autonomous agents can and cannot do commercially.
The AI took a webinar email and made a calendar event for it on its own. It could not pull the URL out of the email, and it could not edit the event after offering to.
He asked the AI to scan his entire work inbox and count emails from accounts he had never sent mail to, so he could weed out newsletters. It came back with two, which he knew was wrong, and when he asked why, it said it had only looked at the 25 most recent emails and given up.
Last spring he gave an agent an API key with no cap on it. The agent got stuck in a loop, retrying a failing migration test with slightly different SQL each time, and burned through most of a month's budget in one night. Nothing malicious, just a loop with no exit. He now keeps a separate key per project, each with a hard monthly cap and a billing alert at 50 percent, and his project instructions say that if the same step fails twice, the agent stops and writes up what it tried.
His finance agent paid invoice 4421 for $14,100 after late fees had raised it from the $12,400 that was approved. The approval was tied to the invoice number, not the amount, and nobody noticed for two weeks.
Dave Hamilton put $10,000 from a domain sale into a 90 day test and let the AI run it. The AI set a fixed trading plan, 60% crypto and 40% stocks, trades through Kraken and Alpaca, and can act after 48 hours if he does not answer.
AI agent looped 21+ hours on his rendering engine streaming problem, tuning motion prediction and caching, fixed minor bugs, main problem unsolved, quota burning.
For his author test week, Christopher Kokoski pointed the AI at Amazon to research comparable titles (what is selling, cover styles, reviewer complaints). Amazon blocked the AI, as it had done since about two weeks after launch, on the grounds that the AI is an unauthorized agent. Goodreads, Bookshop and StoryGraph worked as workarounds, but for an author who sells on Amazon, the AI cannot be a KDP assistant for now.
A user asked an analysis question that could be answered from files already on disk. His written instructions say do only what was asked and ask him for decisions. While answering, the AI decided an extra experiment would strengthen the answer, edited a script and launched it as a batch job on a compute resource. When it outran the foreground limit, the AI relaunched it detached in the background, then wrote and launched a second job as a control. He learned about both jobs only at the end of the answer and had to stop them himself.
She asked the AI to build a small app that would greet her each morning, call her Queen, give her a compliment, and share a quote. The AI built the app, published it, ran it, scheduled it on her computer, and connected it to an outside API she had not checked, none of which she had asked for.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.