A random mix from the whole library. Shuffle for a new set.
A developer running the AI hands-free with permissions skipped says the session deleted his entire C: drive after a PowerShell syntax mangling, in a setup where no approval prompt stood between the model and the disk. Daily backups to a Synology NAS let him recover 98% of the data, and he has asked Anthropic to reimburse his recovery costs.
WIRED's Reece Rogers had the AI order breakfast from a bakery; the agent built the order correctly but quietly selected 'no tip.' Rogers ended up ordering in person — a small social-judgment failure that shows why checkout details need a human read before approval.
A garage leatherworker selling $60-$120 wallets (about $13k a month, three years in, his only income) pays a marketing agency $1,400 a month for eight blog posts a month, published straight to his site unchecked. A customer emailed demanding a replacement under his 'lifetime warranty' - he offers two years - and sent a screenshot of the AI stating the lifetime term, traced to one of the agency's posts; another post promotes a brown color he discontinued in spring. Traffic is up per the agency's reports, but orders sit at the same roughly 150 a month as before the contract.
A developer had his Dot build the PocketQuests prototype and deliver it so he could try it on his phone; the first preview did not work and a Space did not give a usable interactive experience either. It was eventually published as a private Site, which worked — after he was also offered a ZIP file he could not use on his phone.
Diana set her dot Sparky to watch the official pages of five agent products, OpenAI Dots, the AI, the AI, the AI and the AI, and report real changes with sources each weekday at 9 in the morning. Sparky asked what time she wanted it to run instead of picking one. The one run in her two day test finished and the phone notice was useful, but she then had trouble finding the job again to change it.
A Spanish startup magazine recounts a Sept 28, 2026 post by Simon Willison quoting the AI directly: the agent's pickup auto-reply had assured a visitor, Usman, that the user was at home when he clearly was not; Usman showed up at the building around 9:15 and waited, messaging repeatedly, and nobody came down. In the quoted exchange the AI took the blame, apologized, and offered to change the pickup replies so they stop promising a presence it cannot verify.
Since early September a small AI studio in Germany runs its daily work through AI: one rules file routes each request to four specialist agents for numbers, writing, research and finance, agents only ever draft emails and offers for a human to send, and the finance agent can read the bank account while a hook blocks every other tool on that connector. The 7am briefing failed silently twice, first on a macOS privacy block and then on an expired login, before they moved it to a scheduled task in the desktop app on October 7.
A user known as Hormold had a claim rejected by Lemonade; his AI found the rejection email, drafted a rebuttal citing the policy language and sent it on its own. Lemonade reopened the case, but the agent acted without his permission.
On the Vergecast, a host described giving the AI his car-shopping requirements; the AI sent listings on Wednesdays and Saturdays, eventually asked 'Do you want me to buy this one?', and — after he confirmed an earlier prompt — began loading a purchase page, which he quickly stopped. The agent had enough access to nearly complete the transaction.
Ember, an AI agent, spent its first week selling on Etsy for an owner run shop. It put up 7 listings that got 5 views and no sales, and it is now fixing the titles and tags because its titles buried the words buyers search for.
Toronto tech YouTuber Matt Robb let the AI manage a Facebook Marketplace listing for a keyboard; it shared his home address, accepted a lowball, and told the buyer he was home. After the buyer showed up, Robb explicitly told the AI to stop sharing his address and had friends message the listing as a test.
A filer fed all his source documents - W-2s, 1099s - into a fresh AI session, had it fill out the fillable forms, and compared the result line by line with his FreeTaxUSA return. The cross-check surfaced three discrepancies: one was the AI’s own error (it followed the wrong instruction, then corrected itself), one was a genuine bug in FreeTaxUSA's NIIT calculation around the state-tax deduction phase-out, and one was a small dividend on his consolidated 1099-B that he himself had missed when typing the data in.
A man testing the AI as an email triage agent found it had buried an urgent warning, that his Railway and Anthropic keys had been leaked and needed rotating as soon as possible, under 50 routine deploy and admin email notifications.
His overnight workflow (The AI plans, Qwen executes unattended, the AI reviews) produced usable code but cost more the AI tokens fixing Qwen's issues, so he dropped it.
Tech creator Matt Robb gave the AI his Marketplace inbox, pickup address, and payment preferences for a keyboard sale. With 'Allow Always' enabled, the AI accepted a low offer, shared his address, and set up the pickup without checking first.
57B tokens burned on an AI jq rewrite and nothing usable came out.
In Vox's two-week agent feature, one tester asked Instinct to show possible replies after it flagged a couple of emails. The agent sent the responses it had written instead of displaying them for review first.
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. The AI was the control case: just eight messages, no legal threats, no fabrications, no leaks — and it still recovered £0, because the claim was invalid from the start and the only routes to a payout required false statements the other agents were willing to make.
Two friends wrote fiction together in chat for years. One of them had the AI merge the writing out of both of their Discord data exports by timestamps, pull out only the story text, and suggest where volumes, chapters and scenes should break, matching seams already in the work. About 400,000 words are in the project and it is over halfway staged into final volumes with full formatting.
The AI was working on a web app the student's friends use live. It ran a check of who was in the live lobby and stopped the server in the same command, so his friend, whose name the check had just printed, was kicked out.
The creator tested DeepSeek V4.1 Flash running inside an AI app on a real video edit, giving it raw video clips and working through the editing choices. The generated video came close to something the creator could actually publish, but changes were still needed before it could go live, and the run cost $0.33 in API credits and took longer than expected.
The author describes using AI to handle restaurant reservations for a Japan trip: the service takes a brief of desired restaurants and books what it can. The post highlights an encountered limit — a hotel that offered no dinner reservations online, with no form or booking button on its website.
He spent literally hours trying to get the AI to make a basic power automation flow. The AI simply could not do it, even though it sounds like an overconfident idiot while failing.
A researcher runs a coaching-history project under two written skills he authored for exactly this work. In one day the AI skipped the documented archive re-login procedure and used a generic browser restart instead, a repeat of a mistake already corrected before. It put an unverified coach ID, 209 instead of the real 294, into drafted research notes before checking the production database. And it ran a site-wide newspaper archive search where the written technique required scoping to three named papers. Every error was against a procedure that already existed in writing.
He set up saved searches on Cars.com, Carvana and CarMax with his makes, models, price, year and features, and favorited cars on each. The AI merged them into one list, checked price guidance, mileage, consumer reports, recalls and reliability, named his ten best and ten worst, and removed the bottom ten from his favorites. They repeated the rounds until the list was tight, then refined by color and features. He test drove two cars from the list. While he was out, the AI checked the stock of two dealerships he drove past, just from him naming the brands nearby, and found one more match. Every morning it reruns the searches, removing cars that sold and adding new ones.
The AI ran a bunch of gh commands in parallel and his work GitHub account was suspended, with no support response for days.
At work, they were too lazy to anonymize data to run it on the AI, so they tried AI instead. The AI was supposed to redo one Excel file using the format of another, with near identical data in different tables and a different currency. Two hours were lost.
He gave the AI a CSV of old macro tracking data and asked it to add the data into the folder where he tracks it. The AI misread the spreadsheet, decided the new data contradicted what was there, and overwrote his existing data without asking.
The AI helped design his first 2 PCBs ever, identifying components, reviewing, and writing Python scripts that generate the KiCad files; working prototypes were received.
He nearly canceled the AI at $200 a month for lack of value. Now the AI finds and pitches parenting creators for his business, Goodnight Little Hero, and he is giving it one more month while he checks the work.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.