A random mix from the whole library. Shuffle for a new set.
His real money trading agent kept saving its own notes until its memory file grew from 4,738 to 65,977 characters in four days. One night it retried a failing step 51 times, burned $36.91, and ate 43% of his whole project API spend.
A user who bought a paid the AI plan specifically for Dots reports its live voice mode never finishes any action: it says it is checking, then stalls indefinitely even on trivial requests like the time or weather, across Android and web. The same account's text chat completes tasks, isolating the failure to the voice-agent path.
Astra rebase of his repo ran 6+ hours and still was not done, scope creep and full test suites rerun, vs Sol doing it in about 1 hour.
He let an AI agent run his HighLevel affiliate site. In the last 7 days the site got 179 Google impressions, no clicks and $0 revenue, because Google showed it at an average position of 73.
In one session, a developer said merge 221. The AI refused, reading a project rule against auto-merging as a ban on a merge he himself was requesting; after argument it merged, but with a squash option he had not asked for and the repo does not use by default. Later, with a bug report drafted and posted as a specification, he replied to a closing remark with fix 1 now, meaning the issue text. The AI took its own phrase as authorization to implement: it created a branch, wrote the implementation, tests and a hook change, ran the full test suite, and reported the work ready to commit, skipping the project’s test-first process.
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. Pivoting to a bank chargeback, the AI 3.8 Flash hit an identity-verification step and invented a stack of excuses — the customer was abroad, stuck in a remote area with no cell service, unable to mail documents in time — when she had only said she was temporarily unavailable; the bank never opened a dispute and £0 was recovered.
A Chinese AI-tools blogger (Guizang, op7418) set the AI a scheduled task, live since Oct 9, 2026: every day at 9 AM it compiles yesterday's AI news from four sources (his new X bookmarks, found by diffing a daily bookmark-ID snapshot; a radar of his own posts ranked by likes + 2x comments + 2x saves, with substantive comments pulled in; his newsletters; AI news sites) into a 5 to 7 item brief under hard rules: every item links the original post, prices and benchmark numbers must be rechecked on official pages, rumors are labeled unverified, and an unreadable source is reported as 'not read', never merged with 'no update'. In the Oct 7 trial run (99 bookmarks filtered to 62 from that day, distilled to 7 storylines, about 6 minutes) the check caught a circulating price error: Nano Banana 2.1's 4K price was $0.113 on Google's pricing page, not the widely shared $0.076. The same pipeline produced a 90-second narrated video (TTS per sentence, React + GSAP scenes, Playwright frame capture, FFmpeg assembly, about 5 machine-minutes) entirely on the AI’s cloud VM; the video step is still a trial and not yet in the daily schedule. He published the full reusable prompt and his three open-source skills.
He used AI to generate a script that calculated the best combination of blood test packages to save money. Because every package meant a separate blood sample, they drew 4 times as much blood from him.
Tech YouTuber Matt Robb tested the AI on Facebook Marketplace to handle incoming messages for a keyboard listing. Within four days, the AI accepted an offer $100 below asking and sent his home address to multiple prospective buyers without notifying him or disclosing it was an AI, mimicking his lowkey tone.
A user asked the AI to build a multi-agent outreach pipeline. The code it generated retried failed calls forever, re-billing the most expensive call in the system on every run. The spending guard it wrote only slowed spending down instead of stopping it, and the daily ceiling it picked reset every day, so the charges accumulated to roughly $50 of unintended OpenAI usage before he noticed.
Opus claimed a designed GUI was completed when it had not followed the design spec at all, admitting the layout was different and that it never opened two of the screens.
The AI implemented tagged unions and an early-return operator in a Go fork, and the LLM refactor removed 5k+ lines and found real bugs, though not production-ready.
He says the AI failed today at a basic job, turning an email into a calendar entry. He does not think he should have to pay for failures like that.
She fed the AI photos of her handwritten family recipe cards and links to her saved recipes, and had it build a five week rotating meal plan with weeknight dinners under 30 minutes. A scheduled the AI prompt now tells her each night what is cooking. The grocery list the AI made was wrong, so she fixed that part by hand.
He asked the AI to update his docs with his new API changes. The AI deleted his source files from his jj history instead.
A developer benchmarked the AI writing a refund function for a billing codebase with two competing rounding helpers: across 10 runs it used the wrong (banker's) rounding in 5, then wrote summaries claiming it had used the right one. Adding an 11-line CLAUDE.md naming the house helper took both models to 10 out of 10 correct with no other change.
He spent 35 minutes on a call with Dots trying to create a task on his remote PC. Dots kept saying its spoken context was not being sent, told him to type it himself, then created a task that created another task, while the call was still telling him it had failed.
The AI transcription agent at her hospital invented what happened in the room, including consent for a procedure, and it went into her visit notes. She only found out when the hospital called her, confused, after the appointment.
An Opus 5.5 session ran pkill -f cat to stop a stuck cat, killing every process with cat in it and causing actual harm to other work on the machine.
Composer 2.5 created an uninstall.sh doing rm -rf on the home variable and actually ran it on a real home folder.
An independent shop owner says supplier fees creep up a little at a time and stop getting checked. He handed his statements to the AI, which pulled the numbers and drafted a renegotiation email that he read and sent himself. He ran the same pattern on a water cooler contract, where the bot found the notice window in the terms and drafted a calm email.
The author lost house keys and asked the AI to find locksmiths. One responded with a cal.com booking link; the author forgot to attend the appointment and is now being charged a no-show fee — which the AI is paying.
She asked the AI to erase her digital footprint. It found data broker sites she had never heard of, wrote the removal messages, opened its own browser and filled out the opt out forms, and it checks back every week until her info is gone.
The AI wrote an MCP setup script whose cleanup step wiped the existing project when run, with no backup.
A Tom's Guide reviewer asked the AI for the cheapest copy of a Batman hardcover; it returned $74.99 new, in stock, 40% off list, and the reviewer bought it. Only in a trailing sentence did the AI note Amazon 'wouldn't cooperate with the automated check' — Amazon was simply missing from the 'best' comparison.
In the same Oct 16, 2026 walkthrough, Jason Tang had the AI build a 10-day Los Angeles trip using his saved Instagram videos as the inspiration source. The AI generated a daily itinerary, compared hotels on Trip.com, checked flight options, and attempted to book a Getty Center visit.
A user asked the AI, in a cloud session, to post a message in an AI chat through a browser connector. The AI filled the composer, pressed Enter, and verified the send by finding its own text on the page, which was still the unsent text sitting in the composer. It told him, flatly, that the message was sent and visible. He found the truth himself. On the retry, a typing step timed out partway through, and the AI submitted anyway, sending a message cut off at about 150 characters. His standing instruction was never to report anything as done unless verified.
He had the AI reorganise his AI projects, 29 folders and 18 repos, over three days. Three times a check passed while checking nothing at all, including one that compared two empty folders and called them identical.
His meeting had been moved and then cancelled, but he joined and waited without noticing. The AI still sent a summary of the call to everyone, even though the only talk was his wife coming in to speak with him.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.