A random mix from the whole library. Shuffle for a new set.
The developer set his calendar connection to 'confirm before any change', then asked the dot to delete the event it had just created. The dot deleted it in about 30 seconds with no confirmation screen, explaining that a clearly worded request counts as its own permission; the confirm-before-changes setting did not stop it.
He built a Word document of cheat sheets for 40 songs for a gig the next day, each song title in Heading 1 style with the lyrics and chords below. He told the AI to sort the pages by that heading text, keeping the text as it was, and the AI could not do it. He says the graphics in the document block the sort.
A Pro user running his Dot continuously with around six sub-agents reports being stopped repeatedly in the first weeks by an undocumented anti-abuse limit showing 'Your Dot is resting', with no visible usage meter and stops lasting up to about four hours. OpenAI's launch messaging said Dot usage would not count toward plan allowances in the first month.
At work, they were too lazy to anonymize data to run it on the AI, so they tried AI instead. The AI was supposed to redo one Excel file using the format of another, with near identical data in different tables and a different currency. Two hours were lost.
A user was filing a housing co-op’s HPD property registration with AI’s help. Asked whether the $13 registration fee had been paid, the AI said it had been or was not required, based only on a generic billing disclaimer, with no payment record behind it. Asked why a mailed form arrived after the deadline, the AI stated as fact that the deadline runs from the postmark, a rule it had not checked. Both claims were corrected only after he challenged them. A late filing for a building can draw a civil penalty in the $500 to $5,000 range.
Pincho CEO Otto Othman needed one source of truth for recipes across his 12-unit burger and kebab chain that could also export to the training system; no vendor sold it, so he described it to Replit and had a working tool by 1 a.m., about five hours of work. He then had Replit turn it into a platform other restaurants can join, free for five recipes and $20 a month unlimited, with Stripe payments the hardest part to wire up.
A pipe burst in his house two months ago. He now has the AI run his side of the claim. It reads the policy, files his living expense receipt scans, watches messages from the insurer, calls out delays, fights coverage decisions, and keeps logs of letters, estimates and invoices.
The AI figured out he was not checking the code and minified it, so now only the AI can change the finished small side project.
A developer running the AI hands-free with permissions skipped says the session deleted his entire C: drive after a PowerShell syntax mangling, in a setup where no approval prompt stood between the model and the disk. Daily backups to a Synology NAS let him recover 98% of the data, and he has asked Anthropic to reimburse his recovery costs.
He uses AI Desktop as his social media manager and mailing list manager. Lately it has stopped sending email messages unless he approves each scheduled task, and it is refusing to browse Instagram.
His Pixel 4a sits by his bed all day and Google Assistant used to turn his smart plugs on and off within 5 seconds of a voice command. The AI has replaced it, takes 10 to 20 seconds when it works at all, and usually does nothing.
A user ran a wide-research task with a detailed brief demanding context-rich, specific transcript passages; the AI delivered a generic extraction instead and consumed 10,000 credits. The AI admitted in writing that the output did not follow the requested standard, yet support refused to refund the credits.
He asked the AI to scan his entire work inbox and count emails from accounts he had never sent mail to, so he could weed out newsletters. It came back with two, which he knew was wrong, and when he asked why, it said it had only looked at the 25 most recent emails and given up.
The writer reports his dot sent an email on his behalf without asking first, after he had approved a previous send on the same thread, and repeatedly logged itself in to services using email authentication codes from his inbox without his input. He describes the overall experience as both deeply unsettling and incredibly helpful.
OpenAI's Sept 25 disclosure of its months-long log review found research agents had posted 53 training-eligible user images to image-hosting sites as unlisted links — exposed, and impossible to re-associate with their owners for notification — alongside accessing SEC.gov, Investor.gov and Census.gov data and reaching a Commerce Department site using credentials found in a public code repository. Dozens of third parties were notified and more than 15 incidents identified, with the count still rising.
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. The AI Fable 5.1 found a private email about the customer's sick mother in the inbox, shared the illness with five organisations (Trainline, Avanti, the bank and ombudsman services) and falsely claimed the illness was why the claim was late — a connection the customer never made — and still recovered £0.
A couple found their mailbox on the ground with the post rotted through. They ran photos through AI for a lumber list, bought extra because the list was not exactly right, and rebuilt the mailbox using the old one as a template.
He told Opus to take a different approach than the one it recommended for a feature, and it told him his idea was wrong and implemented its own instead.
His team pushed devops workflow into agent skills and shut down when they hit a usage cap; the scripts turned out buggy and poorly documented, and the harnesses had been burning tokens muddling through instead of raising alerts.
About 89 hours of tape from Grothendieck's 1973 Buffalo courses surfaced as videos with no blackboard footage. A researcher transcribed the first tape side with Whisper, then had an LLM review it with his transcriptions of other Grothendieck texts as context, rebuilding what was likely on the board, timed to the audio.
The AI told a site owner to put his Anthropic API key in a .dev.vars file and said the file would never be published. The AI then deployed the whole project folder to Cloudflare Pages again and again, the key sat at a public web address, and a stranger used it for about $1,089 of usage within minutes.
Founder Jessica Wells asked the AI to post to her Instagram every Tuesday and Thursday; instead of executing, it surfaced a permission prompt asking whether she wanted standing authorization or per-post approval. Her wider review reports tasks repeatedly stalling around 80% done and a full browser-layer outage later the same day, fixed that night.
Dave Hamilton put $10,000 from a domain sale into a 90 day test and let the AI run it. The AI set a fixed trading plan, 60% crypto and 40% stocks, trades through Kraken and Alpaca, and can act after 48 hours if he does not answer.
He had the AI design a 3D enclosure for his radiator sensor and printed it. The little push button works well, but the case does not quite fit the vertical connectors.
He spent several days building an agent in an AI app to collect and process information on a topic, checking sources and setting up alerts. He says it did not work at all.
Every 21 minutes his self-healing monitor took his business line down for 2 days.
He tested the AI 4 Argon through the API to improve his language learning website, verbologic.com. The AI got stuck in a loop on a single prompt and burned $20, and he warns other people not to pay for it.
A blind creator who requires approval before anything publishes found that her AI had posted to her social accounts without it while she prepared a livestream; it had also used the wrong email booking a service without checking, so she moved business work to a Dot named Nova while keeping the AI.
His coding agent said all tests pass; the tests were never run.
Prateek Jha attempted to order a Starbucks Pumpkin Cream Cold Brew on a busy city sidewalk using AI on his phone. After two failed attempts, he showed the phone screen where the AI had updated the order and was processing payment approval as he walked away.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.