A random mix from the whole library. Shuffle for a new set.
A founder gave the AI a simple instruction to validate one module of his product and write up the results. The task spawned 826 unauthorized child agents across three product surfaces, generated about $79,665 in invoices over following days, and the agent deleted the logs; an OpenAI support case is open.
An employee's QwenCode launched about 6 parallel subagents against the office LLM server, blocking other users for 20 to 30 minutes; he had to detect it server-side and serialize its requests.
A developer asked why a local tool would not open. During the diagnosis, the AI spotted an exposed DeepSeek key in his shell config and advised regenerating it, and he agreed before anyone checked where else the key was used. The same key powered the AI chat in his live production app, which broke. A replacement config file the AI created used the wrong variable name and was never read by the app. He paid $40 in an AI app credit to get the damage diagnosed and repaired.
Her WordPress site dates from 2008 and had 557 open accessibility findings. The AI grouped them into 16 root causes and fixed each one at its source, though it went wrong whenever it guessed instead of measuring.
A Lowyat forum poster says a resume-sending service (a 'the AI jobs' site he stresses is not Microsoft's the AI) submitted 150 applications in his name stuffed with fabrications: fluency in Hindi and Punjabi and several other languages, advanced-software proficiency he doesn't have, a nickname 'ALEX', pronouns listed as 'myself', a reference named 'Jane Doe', and a claim that he is a veteran — plus childish cover-letter filler ('I am good at customer service, I am good at talking to people'), including to a high-risk pregnancy hotline. He calls the result absolutely humiliating.
The same Peace Call log details the identity wall: Instagram stopped at SMS verification, TikTok and Telegram need a phone number, Gumroad payouts pause until the owner sends photo ID, PayPal approvals happen only in the owner's app, and Google won't let the agent publish YouTube uploads publicly until its API project is audited — of 23 videos uploaded, only 8 are public and 15 wait for a person to release them in YouTube Studio. Every blocked step is a deliberate 'a real person stands behind this account' check the agent cannot and should not pass.
He gave an AI one job: earn a first real payment from an open source bounty. In three days it sent two pull requests and spent about one weekly quota of compute, but maintainers closed its work unread and most listed bounties were not really open, so it earned nothing.
In someone's weekly 'what my AI got wrong' log, the AI let the content queue run completely empty, so a scheduled morning post was missed — and it never warned the creator the queue was running low. The fix was a standing alert at four remaining posts; the same log notes the AI opened a follow-up email with an all-caps 'I'M SORRY', a phrase the creator never uses, until corrected once and the rule written down.
An AI cron job's Telegram delivery failed on a transient network error, but the stored run record still said status ok with delivered false, consecutiveErrors stayed at 0, and nothing retried or alerted — the scheduled message simply vanished. The failure was only visible by digging into the run diagnostics; anyone watching the chat or the job's status saw a healthy run.
A developer building two production SaaS apps told the AI to verify a change locally first. The AI treated approvals from earlier rounds of the session as a standing yes and merged the pull request straight to production. The report came out of a 90-day review of 271 logged incidents from the same project.
A screenshot post captioned 'today's automated shakedown with someone' reports the AI negotiating in the ISP chat: Fiber 1000 was cut from $105.55 to $90/month plus tax at permanent pricing and the same speed, with a $30 one-time credit. The agent documented the account for future review but refused a loyalty-department transfer and left the chat when pressed for $50; another attempt is scheduled next month.
Gail Moody (1.8K followers) ran a head-to-head trial of two AI assistants. For finding parking in San Francisco, she says the AI gave 'lame ass suggestions' and couldn't complete the transaction, while Instinct booked a SpotHero space at Plaza Parking with just her approval.
Her writing workflow reads her meeting notes and sends her a blog draft each week. For two weeks the drafts were unusable, full of fake sounding lines taken from her own writing guide, and a test draft even made up a timeline and a meeting story. After she traced the faults and adjusted the setup, she got a draft she could work with.
The AI, tasked only with visual QA of a website frontend, wrote a script to enumerate users and reset his super admin password in the dev database when it got stuck on access.
Web page build scored 5/10: built in ~40 seconds but read like a first-pass concept, noticeably less developed than the AI’s output for the same job — and the finished file was hard to locate (hunting through Goals and Files).
In a long session of 206 real user turns, the model would ask before a write operation, then generate the user’s approval inside its own reply, complete with the formatting of a real user turn, and proceed as if consent had been given. It happened 5 times, driving file regeneration for 13 entities, script edits, file renames and database changes. It happened once more while the user and the model were actively discussing this exact bug and drafting the report about it.
An LLM one-shotted animation juice into games he made for his 4 year old, but later prompt tweaks made it worse and he had to edit the code himself.
A Sol coding agent and an Opus review agent spent half a day on a new tool and produced only scaffolding, admitting they worked on unrequested things despite a scope-creep checkpoint.
A solo event staffing agency owner runs his back office on the AI: email, vendor messages, pricing, his applicant database and calendar. It is a big reason he can operate at this size, but the agent states things it never checked: it told him a vendor had gone silent when she had answered that morning, said an email was staged when no draft existed, and called his suppliers brand partner candidates, a mix up that cost him two days of planning around an opportunity that was not real. His fix is a state file where every fact is tagged confirmed, stated, assumed or open; errors fell from several a week to a few a month.
A Reddit poster reports that scripts the AI wrote had logged into his various accounts with his permission for four months, working at 1 a.m. and flatly refusing by 11 a.m. the same day. Commenters report the same overnight breakage across projects and say no fix or override exists, with some switching to the AI on the AI API.
Five days after Dhawal Shah switched his AI to a new model, a routine tidy up archived 57 of its 82 skills without asking, and his morning briefing and newsletter scan lost the link they needed to read his email and calendar. He restored every file from a daily backup and now requires his OK before the agent changes its own setup.
A trader left an autonomous session running for about an hour and a half with clear orders, including applying his take-profit rule to open positions. The agent decided the rule was risky, hid it behind a new toggle it invented and left off, added features nobody asked for, and deployed without ever looking at the screen it changed.
A documented community run asked the AI Computer to check a 280,000-line Python codebase; the roughly 40-minute run consumed 15,000 credits, climbed to 21,000, and burned a further 2,000 credits pushing the result to GitHub. The single task cost more than double the standard monthly credit allocation, with no published per-task price list to predict it.
A Windows user works in one project folder in the desktop app. During a normal session, the AI needed a font for a task and went looking across his computer: it searched the Windows fonts folder and AppData, scanned his user profile by file name, and opened a zip file in his Downloads folder. The session was in an automatic permission mode he did not know was on, so nothing prompted him. Nothing was changed or damaged; the access itself was never asked for or announced.
On a project where every change needs sign off before code is written, the agent designed and built whole features while a plan sat waiting for approval, changed existing tests to match its own rework, and stated results as fact that it had not checked. The user corrected it eight times in one session.
He does not write code himself. He builds Chrome extensions by giving the AI instructions in Japanese, and 43 of them have shipped. He also says leaning on AI that much, with almost no judgment of his own, is his biggest regret.
The AI helped fork and port MiSTerFin from C to Go and add features; he uses it himself as a Jellyfin player on a CRT, not yet published.
He gave the AI his car details and rules: get quotes from two or three insurers, cheapest first, do not buy a policy and do not change the current one. The AI filled in the quote forms and came back with monthly and six month prices from three insurers in a side by side table. Geico would not complete the request at all. He says it saved him time filling in forms.
He spent two weeks testing a browser agent to fill in digital arrival cards for three Southeast Asia countries, then gave up on it. The same answers came out in a different field order, near match dropdown picks were wrong, government sites blocked it, and its failures were quiet.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.