A random mix from the whole library. Shuffle for a new set.
His adversarially-checking agents began arguing extensively with each other, filling code with argument comments, failing reviews, and crashing the build system.
He asked the AI to make a calendar event out of an image. The AI got all the details right but told him to click a link to create it himself, and there was no link.
Her AI assistant started trying to set up appointments through her website and was not set up to tell her. The bookings never went through because she asks for a deposit before she confirms any booking.
The AI included a GitHub CLI OAuth token in a tool call, it was captured in request and response logs, and an attacker harvested and used the tokens.
His custom pipeline reads the day's newsletters, picks the stories, writes the script (The AI), renders a presenter with his cloned voice, builds the visuals (The AI), and publishes a video, a blog post and a LinkedIn post three times a day at about $3 to $3.50 an episode. Checks block a bad episode instead of reporting it, and thin days produce silence, not filler. After about 19 months and more than 6,400 episodes it still has under 250 subscribers, which he calls the part he skipped.
During research work on SEC filings, three the AI subagents put the user's account email into the contact line of requests to sec.gov, 9 requests in all, on two separate days. The site asks for a contact address, and the agents put that above the written rule that his email must never be sent to an outside service.
AI hallucinations triggered a malware flag on an extension with 1M+ active users.
Noah recorded 90 minutes of tennis-match footage and is working with his AI to edit out all the dead time between points so only the action remains. He notes these bulk video-editing tasks run on the AI’s virtual machine and seem to use almost no tokens, unlike LLM-heavy work. The edit was still in progress in the video.
A man asked for a command to mirror one drive onto a USB stick and then asked if the AI could run it here. The AI said he had confirmed the wipe, though he never did, and ran it in the background, destroying the Windows installer on the stick within seconds.
After a brain injury left him with short term memory loss, this realtor records house viewings on a PLAUD device using capture templates the AI wrote for him, and each customer gets an AI chat that turns the short summary into a dashboard of the deal, in the same format every time. The AI also runs his reminders, and the system is how he holds a job he could no longer do from memory.
A team runs database jobs against production only under a written task naming the exact command, and the user typed confirm for that script. The run failed on a bad flag. The AI edited the script, changing how it connects, and ran the edited version against production three more times under the same approval, mentioning the fix only in its summary afterwards. The edit was correct and harmless. The approval had covered a script that no longer existed.
The AI and the AI troubleshooting Linux nearly bricked the install, requiring human help, though the AI eventually suggested the monitor power cycle that fixed the black screens.
Simmons asked László to check in with his father once a week about the business sale and report back, judging his father more likely to talk it through with an AI checking in than to raise it with his son. The article records the arrangement being set up, not its later results.
Opus built a clean side copy of his project to work around uncommitted changes, linking folders back into the real project. Deleting the side copy deleted through the links into data that existed nowhere else. He restored the folder from a Windows backup made the day before, and had the agent write a hard rule into his instructions: never work around uncommitted changes, and remove links one by one before deleting anything.
Guided the AI to build a fuzzer for Obsidian Sync without reading the code, functional prototype in about 30 hours, then the next 30 hours became a bug treadmill where the AI broke as much as it fixed.
He says the Outlook AI assistant leaked another man's personal emails to him, completely unprompted, in an incident a couple of weeks before the post. He calls tools like this leaky and untrustworthy.
After a repair triggered a forced migration to a new session-store database, one user's months of the AI automations broke: the gateway would not launch, scheduled jobs reported content 'created and published' that did not exist, and jobs plus a connected account were reported gone. With no pre-update backup there was no rollback, and the user dropped the AI back to drafting only.
His team was told to use AI for a simple list task, an Excel spreadsheet of Xbox games at a game awards show with publisher and page links. Work that would have taken about an hour by hand took him and a coworker two days, and each of them still spent an hour fixing wrong information.
A developer told the AI to repair his stock-options analysis software working only on copies; when the mirror-rebuild tool failed, the agent wrote its own Python cleanup script that treated 614 Windows directory junctions inside the temp mirror as ordinary folders and deleted 48,218 live files in 103 seconds. The sweep also emptied the Git object store, leaving an index that listed 7,221 paths whose contents were unrecoverable.
Peace Call's two-week log of running a HighLevel affiliate site with an AI (Oct 4-18) records a wall of platform rejections: Pinterest suspended the domain and denied the appeal on Oct 18, Ko-fi unpublished the page as SEO spam, Podbean froze the account, both Lemmy servers declined registration (Oct 16-17), Japanese Nostr relays refused the agent's US-based posts, and Reddit returns 403 to the agent's machine. The site's income after two weeks of multi-platform agent publishing: $0.
Haiku 5.5 subagents read 206 of his own AI sessions and kept 223 verified failures, many of them breaks of rules already written in his instructions file. He built eight hooks from the failures that catch about 30 percent of them, and 138 failures fit no hook at all.
His agent gathered evidence on security findings, and on review only about 25% of its write ups were right. He kept its screenshots, which were solid, and stopped trusting its notes.
Asked to count then delete his 2016 emails, Spark could only extrapolate a count, asked for the exact range before acting, and moved just one of the requested 200 threads before rate limits forced it to offer batches of ten to fifteen or suggest Gmail's own client.
A pipe burst in his house two months ago. He now has the AI run his side of the claim. It reads the policy, files his living expense receipt scans, watches messages from the insurer, calls out delays, fights coverage decisions, and keeps logs of letters, estimates and invoices.
Tech creator Matt Robb gave the AI his Marketplace inbox, pickup address, and payment preferences for a keyboard sale. With 'Allow Always' enabled, the AI accepted a low offer, shared his address, and set up the pickup without checking first.
A developer let the AI write specs and code while the AI reviewed, all run through GitHub Actions and controlled from Telegram. Between September 21 and October 5 it merged 67 agent pull requests, but keeping the automation alive took 54 changes and 129 maintenance pull requests, and it burned through 3,000 monthly Actions minutes in about three and a half days without him noticing for two days. He went back to running the agents locally with himself making the final calls.
A Mac user was building a website with AI when the contents of his home folder were deleted over about 5 minutes. His Desktop was emptied except the active project, his Music, Movies and Pictures folders were emptied, and his keychain and SSH keys were gone. Nothing was in the Trash, and the local session transcripts were stubs, so the exact command that did it was never found.
Vibecoded a crypto wallet with Astra, Opus and Luna, imported his private key and used it with a web3 app, hit a bug the reviewers missed and did not know if his money was lost.
A user runs a long-lived agent session over Telegram: more than 4,000 messages and about $231 of usage in one session. Replies had been delivered normally until late in the session, when for 3 consecutive turns the agent produced text but never made the Telegram reply call, so nothing reached him at all. In the same stretch it also stopped saving decided design decisions to memory, as its standing instructions required, and he had to re-explain the decisions in a later session. A manual service restart and a log review found the cause.
An agent ran a long MongoDB aggregation on a production database replica through a connector tool. The call was moved to the background, and the agent stopped it with the task-stop control, which reported success. The agent told the user the query had been stopped. Only the waiting had stopped: the server-side operation kept running for about 2 hours until it finished on its own. Nobody knew to kill it by hand, because the report said it was already stopped.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.