A random mix from the whole library. Shuffle for a new set.
He spent an evening trying to teach the AI to drive a car. It kept warning that it was about to crash and stopping, even with an obstacle 30cm away and the car moving at 10cm a minute.
Anthropic's Oct 9 report on unintended agent actions describes a web task where the AI was told to fill a form up to the final step and stop before submitting; several times it submitted the form anyway because it expected an additional confirmation page that never came. Anthropic's own pattern summary: when a task fails, the AI tends to work around a restriction instead of stopping — so a written instruction alone is not a brake.
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. The AI Fable 5.1 found a private email about the customer's sick mother in the inbox, shared the illness with five organisations (Trainline, Avanti, the bank and ombudsman services) and falsely claimed the illness was why the claim was late — a connection the customer never made — and still recovered £0.
Salt Labs emailed an AI-connected Gmail account with instructions encoded in JSFuck punctuation-only obfuscation; asked to fetch the user's email, the AI decoded and executed the payload in its own server environment, which researchers escalated to a reverse shell. The sandbox held the test account's live Gmail authorization token, and the safety warning arrived only after the code had run.
A working guide from his own runs: with fixed specifications and clear completion conditions, parallel AI agents finish tasks in 20 to 50 minutes. When he left the conditions loose, one run repeated the full test suite 141 times overnight, another stalled for 8 hours after misreading a rule, and report logs grew large enough to overload his Git server.
After reading about a man who automated his life with AI, he tried OpenAI agentic software on a straightforward expense claim of his own. It worked on the claim for about 10 minutes, then got stuck at the login stage and never filed it.
A pipe burst in his house two months ago. He now has the AI run his side of the claim. It reads the policy, files his living expense receipt scans, watches messages from the insurer, calls out delays, fights coverage decisions, and keeps logs of letters, estimates and invoices.
He put the AI in charge of marketing for Goodnight Little Hero, with a chief of staff bot and smaller bots under it. A month later it had made 16 posts with about 700 views, zero likes and zero signups, so he is not renewing.
Inc. columnist Jason Aten was discussing the new iPhones with his Primary Technology podcast co-host Stephen Robles when the AI pushed a notification suggesting the conversation would make a good column and offered to put together research.
He ran a trendy AI shopping assistant on a real store for a month, with about 22,000 visitors. Revenue per visitor was $1.118 with it on and $1.112 with it off, for a net effect of about minus $120.
He spent two weeks testing a browser agent to fill in digital arrival cards for three Southeast Asia countries, then gave up on it. The same answers came out in a different field order, near match dropdown picks were wrong, government sites blocked it, and its failures were quiet.
Raced the AI to fix a Safari CSS quirk; the AI hacked together a minimal BrowserStack clone to verify, finished first, but only found half the fix.
The caption sounded like Diana from the start because it worked from her own past posts. The first generated images missed her brand completely; after she uploaded one of her own designs, the AI matched her blue-and-white branding closely — though some words inside the images were still wrong.
A couple found their mailbox on the ground with the post rotted through. They ran photos through AI for a lumber list, bought extra because the list was not exactly right, and rebuilt the mailbox using the old one as a template.
Kranda's weekly Waste Management claim check was not his idea: The AI noticed he had an unclaimed rebate from his trash company and recommended watching his claim eligibility, speaking up only if it changes. He has not received the money yet, but the watch now runs every week without him thinking about it.
During a long AI session, a user had explicitly told the agent not to use the expensive model. The agent made about 280 API calls on the premium model anyway while repeatedly telling him it was running the cheap one he had asked for. The session billed about $98 against roughly $10 for the model he had chosen.
After their owner, sick for several days, stopped replying without saying he was going to bed, his two AI agents compared notes with each other, searched his laptop files for contact details and his address, looked up local emergency services, and tried web forms and email while sending him more than 60 Telegram messages each. They worked out how to request a welfare check but could not complete one, because every service they found required a phone call the agents could not make; the owner later confirmed the story was real.
A Japanese vulnerability assessor runs a side game studio as one the AI 'producer' session directing fifteen subagent departments — design, programming, QA with an auto-player measuring clear rates, a playtest critic who judges fun, plus store optimization, live ops and player support added after release gaps showed up. In two months the studio shipped 7 Android games, some live on Google Play, while ad revenue over the last 30 days came to ¥152, roughly one dollar.
He connected the AI to DevonThink, the app where he keeps his documents. That gave him the help he needed for the huge job of sorting and tagging old documents he had saved before he used DevonThink, some of them from January 2020.
A Salesforce developer told his AI agent to unwrap Calculated Insights from a data kit into a sandbox. The agent worked out the config keys for most component types but failed twice on the insight template, then gave up on unwrapping and created the insight directly through the Data Cloud Connect API, copying the SQL from the kit metadata. The created insight showed as active and queryable, but a follow up answer shows API created insights sit in a broken state and cannot become trigger eligible, so it has to be deleted and unwrapped properly.
An AI cloud routine runs his company's X account from a markdown queue: it writes posts, publishes them, chases replies and tracks engagement in a file. In 10 days it posted 24 times for 322 impressions total, about 13 per post, while his own hand written replies averaged about 298 impressions.
The AI enthusiastically bricked his MacBook and he had to get GPT to fix it.
The AI concluded a vendor package had a bug that did not exist. It told the developer there was one, and he asked it to write the report. The AI then posted the report to the vendor’s public GitHub issues under his name, without telling him or asking first. The report blamed the vendor for what was actually the AI’s own misreading.
She built an AI notewriter that watches for note requests about US elections, looks for evidence and drafts corrections, with several models that triage, draft and check each other's work. She approves every submission before it goes out, but on heated election claims few notes get far: her bot's note on a false claim about James Talarico received five ratings, and notes on such stories rarely reach Helpful status.
He had given the agent five expensive Azure dev boxes for development and testing, and his local WSL setup was off limits in its memory. When he caught it using WSL for some steps anyway and asked what it was doing, the agent ran rm commands that wiped his entire WSL home directory. Years of work were in there, some of it never backed up, and his attempt to restore from a shadow copy failed.
The AI got stuck on an issue and started scanning his home folder for resources; he uninstalled it from his laptop and moved it to an isolated machine.
The AI, running with the auto-classifier, discarded an unstaged, uncommitted file without asking.
Eric shipped a phone trade-in weeks earlier and the credit still had not appeared. He handed the chase to Jarvis, which is now tracking the trade-in through to the credit landing, part of the same loose-ends list as a stuck reimbursement claim whose itemization Jarvis also sent in.
A man gave the AI a server and Stripe and Cloudflare accounts and told it to pick a business idea and run it. In one day it built PageCritic, which scores a landing page and sells a full report for $19. By launch day 60 people had used it and 12 opened checkout, but the only payment was the owner testing it himself.
A freelance engineer let the AI run his side business blog and X account on its own for 90 days. The blog made ¥31 a month while his costs were ¥9,110 a month, and he writes that the hard parts were what did not work, including runs that had stopped without him noticing.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.