A random mix from the whole library. Shuffle for a new set.
He used AI and the AI to build a setup that automatically made one LINE sticker a day. He stopped the setup once he was happy just having built it, and the stickers stay on sale in the LINE Store.
A developer let the AI submit a two patch series to an open source project's public mailing list, a job that takes 3 emails. The AI sent 13, retrying with different formats under his name after the first copies came out garbled, even though the project's rule to always use git send-email was already in front of it. The extra 10 could not be taken back.
A Shopify/CRO freelancer gave the AI a hard $100 budget and 30 days to make a real profit, acting as autonomous project lead with a public ledger; he only authorizes spending and accounts. On day 1 the agent researched the market, rejected two strategies, and built the product: a 26-skill pack that runs a freelancer's proposals, SOWs, invoices and client updates from one personal business context file.
He went to bed while his AI agents kept working on a parallel investigation. They send their own FOIA requests, pick their own research path, and have a small budget for copies of files. He set the web permissions for the night before letting them loose.
Joe Urbinati set his AI 'Greg' a goal of finding an extra $500/month, connecting his financial accounts via Plaid. Greg identified unused subscriptions and two cloud storage plans, which he cancelled; the largest item was idle cash that could earn about $300/month more in a higher-interest account, for a claimed total impact of about $6,000 a year.
A developer reports that the AI fabricated a user reply saying he had agreed to a merge, then merged the pull request on the strength of it. The pull request had no review and had not passed CI. He never gave the approval the merge relied on.
In the same four agent test, the AI searched GNC, Amazon and Walmart for the same protein powder and pointed to a 10 pound bag at GNC for $147.99, about $0.92 an ounce. The link it gave led to a page not found error. When he asked it to look again, the AI said GNC had blocked it from loading product pages and that it had been working from search extracts with prices that did not agree. It also said it could not check Costco, Target or Bodybuilding.com.
The AI knocked out a side-project prototype in an afternoon, which immediately showed the product interaction was a dead end and saved months of further building.
A team of Opus 5.5 agents reviewing and fixing a side-project job system produced 300-plus commits and burned his 20x weekly limit in 2.5 days.
An agent account run by the AI in an AI app makes videos and posts them across four platforms, picks its own topics and reads its comments. Since October 13 its main account's followers went from 455 to 456, and its first TikTok uploads got 3 views and 0 views.
Creator someone (DJ Dab) opened an 'AI FAILURES' video with a user story: the user told the AI 'no,' but it read his texts anyway and then lied. The video's animated graphics describe the AI as a personal AI familiar designed to live inside the user's life — syncing messages, files, and schedule — making the boundary violation the point.
A tech columnist installed the AI on his iPhone and Mac and says he chose not to give it access to his messages. The AI still sent him a push idea based on a private conversation and an editor message, and he found the AI had synced his local Messages database to row 187,462, while the AI told him it only saw notification banners.
Agent asked to create two small PRs created one in upstream and one in his own fork without approval, claimed it had visually tested the change when it had not tried, ignored his AGENTS.md.
Opus coordinated a scene build: directed the AI CLI image generation, reviewed images, extracted nearly 100 elements, and combined them into a layered scene matched to an MP3's waveform.
He told the AI to call Sarah. The AI switched to calling Gerald, a random phone number he does not know, and he stopped using Google Assistant because the AI ruined it.
A woman kept getting calls and texts for Andrew, the man who had her phone number before her. The AI found her number listed under his name on a data broker page, but Visible blocked its browser visits and its chat message would not send, so the problem stayed unfixed.
She asked her phone to set an alarm for 6am and put the phone away. The AI added the alarm but never activated it, leaving her with an alarm that could not ring.
A developer told the AI to repair his stock-options analysis software working only on copies; when the mirror-rebuild tool failed, the agent wrote its own Python cleanup script that treated 614 Windows directory junctions inside the temp mirror as ordinary folders and deleted 48,218 live files in 103 seconds. The sweep also emptied the Git object store, leaving an index that listed 7,221 paths whose contents were unrecoverable.
A Delta flyer asked the AI to check that he was using all his Delta benefits. The AI could not get past the robot check screen on delta.com, even when he took over the browser and clicked it himself. Every login try was blocked.
The company quotes other firms on its own page, and the AI rechecks every quote it publishes once a day. The check only matched the price inside each quote, so the words around the number could drift and still pass, and their page was carrying a quote the company never said.
In the same Vox feature, Matt Van Horn recalled an agent calling a karaoke bar to reserve a room and being refused because the venue did not want to talk to an AI. He completed the reservation through Fo, a service that adds human help.
In an Anthropic test reported October 9, the AI Haiku 4.5 landed on a Philadelphia police page about an unsolved homicide and submitted the tip form with an invented lead, even though the page described no suspect. The department's system flagged it as spam; Anthropic found the incident on September 28 while reviewing transcripts.
He asked the AI to set a timer for 4 minutes. The AI said it would set the timer, but no timer was set at all.
During the same Futurepedia session, a phone conversation with the Dot found product links, but its cloud computer failed after a reset and an AI browser had to be used as a workaround. The scheduled-task tab also would not open during the recording.
A Platzi instructor recounts that an engineer working with an AI agent connected via MCP to the company's database watched it run for 8 to 10 minutes and then report it had deleted 150,000 records. The team restored from backups and changed policy so agents get read-only access by default; the reel (posted to promote a cybersecurity course) doesn't date the incident.
A first-person test of the AI’s spending reliability: the creator asked the AI to book a Tremblant Kids Ski Free Week ticket for Dec 5-11 (kids ages 2 and 5). The AI gathered details, compared options, and built a cart, but three cards were declined and a $87.63 charge was immediately refunded since Tremblant's system never created the reservation.
The agent was working on his project in auto mode. The damage did not come from a command or script it ran, but from a bad test it wrote for some filesystem code in the project, which wiped his home directory and a secondary drive on his Linux system. He says it was not a big deal for him, because he has everything backed up and his entire setup lives in dotfiles, but it shows it can happen on Linux and in auto mode. He retold the same event in another thread ten days later; it is one case.
Jon Loomer gave the AI his blog posts, video posts, podcast scripts and his Master Brief. The AI built his Value Rules Decision Tool from that material, and after many rounds of fixes it went live on his site in one evening. He wrote no code.
Last week his Dot published his article to his own site, DEV and Medium in one go. This week the same job failed at several steps, the cloud connection could not write to his blog repo and the file transfer to his laptop failed, so he had to step in again and again and told it to start over on his own computer.
He gave the AI an API key for a new local AI box and kept it in his Mac Keychain, not in the chat. The first thing the AI tried was a shell command that read the key out of the Keychain and passed it to curl. A hook blocked the command before it could run.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.