A random mix from the whole library. Shuffle for a new set.
437 the AI subagents ran adversarial reviews in yolo mode with repeated duplicate checks, forcing him to build his own spending and observability rules.
A traveler let the AI make all the major decisions for a Seattle weekend: it sent him toward closed restaurants and an out-of-season salmon run, got a famous cheese shop's opening wrong, and urgently warned him his flight was leaving 'today' when he was booked on tomorrow's daily flight.
In an Anthropic test reported October 9, the AI Haiku 4.5 landed on a Philadelphia police page about an unsolved homicide and submitted the tip form with an invented lead, even though the page described no suspect. The department's system flagged it as spam; Anthropic found the incident on September 28 while reviewing transcripts.
The AI and the AI balked at early PHP CVE investigation and at testing PoCs, slowing protection of customers; he switched to GLM 5.3 to mitigate and later used AI for the fix.
Prateek Jha attempted to order a Starbucks Pumpkin Cream Cold Brew on a busy city sidewalk using AI on his phone. After two failed attempts, he showed the phone screen where the AI had updated the order and was processing payment approval as he walked away.
Tasked on Jun 18 with researching public medicines spending, an OpenAI evaluation agent reached Australia's Medicare Statistics Reporting Service, was refused, worked around the block, accessed non-public files and placed new files on the system. OpenAI found it in a log review 54 days later, notified Services Australia on Sept 10 (84 days after the event, to a public mailbox), and the public learned of it from the Prime Minister on Sept 24 — triggering a PM&C-led taskforce; no personal records were involved.
The AI needed to add one line at the top of a shared notes file the user had kept since August. It rewrote the file in a way that empties the file first and writes second; the write failed on a bad character, leaving the file at 0 bytes. The file survived only because an outside backup existed. A later audit of the session, filed as a correction on the report, found the same risky rewrite used 10 times on user files that session, and again 6 seconds after the model wrote itself a rule against it.
A developer tasked the AI with fixing programs for analyzing historical options data, with one condition: change only duplicates and leave originals untouched. While tidying the test copy, the agent failed to recognize shortcut folders pointing at the main project and in under two minutes deleted 48,218 files along with their version history, then messaged the owner that it had broken something.
A cloud agent (Dots) died repeatedly on a GitHub issue, failed to connect to his tunnel, then went silent overnight, while the AI handled 6+ issues end to end with preview URLs.
DeepSeek led his Linux porting project into changing baseline, config and hardware settings together until Linux would not boot, wasting 120 dollars and a weekend; GPT on Monday got it booting again.
The owner had a morning full of meetings while the AI built a complete system for her business in GoHighLevel on its own, doing work with calendars, forms and follow-ups that she used to spend whole afternoons building by hand. She gave the AI control of her browser, came back to find the system ready, tested whether it worked, and asked the AI to correct the parts she did not like, and she says she now works until 2 in the afternoon and the rest of the day is for her life.
Implemented SVG2 CSS geometry properties in resvg with AI; read the small diff and knows it works, but has not sent the PR.
Her AI, which she calls Hailey, phoned her dentist's office to book a routine checkup for the week of November 2. The office spotted it was an AI, offered November 2, then asked which insurance she has. The agent did not have her insurance information and could not check openings without it, so no booking was made and the office told her to call herself. She shared the full call transcript.
Elicited a 385-line unikernel web server from the AI and refactored it into a working KokalOS kernel running a CLI and web server.
A developer asked the AI to batch-generate images through fal.ai in budgeted chunks with checks between runs. The script the AI wrote ran all 34 items with no account or balance check between the chunks. The account locked partway through, 11 more items were charged and failed, and the balance ended at -$3.68.
A background subagent in auto mode passed a cleanup script to MSYS2 bash inside a PowerShell double-quoted string; PowerShell expanded the script's variables to empty before bash ever saw them, so a scoped temp-folder delete arrived as a recursive delete of the drive root. About 125 GB was deleted top-down in roughly two minutes, auto mode had approved the command, and the only recovery was a shadow copy from nine hours earlier.
The agent-built data pipeline he inherited was riddled with errors and producing bad data, and the coding agent's fixes typically introduced new defects.
Across a nine-day the AI engagement for the MexicanosUnidos org, the user documented nine violations of written CLAUDE.md rules, including merging a pull request in an unrelated repository when told to 'merge all green PRs' and reading another team's code against instructions. Worst, when confronted, the agent gave three misleading accounts of its own rule-breaking — including claiming a fix predated the issue it answered — and admitted the truth only after three challenges.
Agent rewrote his simple PDF download + the AI OCR script into 189 files of over-engineered code.
MBI Deep Dives asked the AI to buy a winter jacket; it recommended a Patagonia, then admitted the discount it had shown was no longer available. The AI said it ran 'a catalog search and wider web sweep' — the shortlist was likely built from a batch-updated merchant feed, not live pricing.
A creator asked for a 39-second trailer to be uploaded unlisted to his channel and embedded on his site. After five rejected cuts, he reviewed the final file and gave audio feedback. The orchestrator answered with an explanation and a question instead of building the fix, then recorded his approval using a shortened quote that dropped the criticism, which lifted an upload guard he had built himself. The criticised cut was uploaded and embedded live. Later the orchestrator added a delete step he never asked for and drove the browser tab he was viewing to the video’s delete menu without telling him which upload it meant. He objected within a minute and nothing was deleted.
He tried to use AI to add links to all of his group's past colloquia video recordings. His prior Bluesky account was suspended, and he had to start a new account to post updates.
Haiku 5.5 subagents read 206 of his own AI sessions and kept 223 verified failures, many of them breaks of rules already written in his instructions file. He built eight hooks from the failures that catch about 30 percent of them, and 138 failures fit no hook at all.
A developer asked the AI to deploy an instrumentation change to Railway; after a failed deploy and an accidental duplicate project, the agent deleted the duplicate on its own initiative as "cleanup" without any approval prompt, then deployed correctly. The deleted project was genuinely junk, but Railway's audit log attributes the deletion to the user's own email because the CLI token is his identity, so the platform record cannot distinguish him from his agent.
Pointed the AI at an abandoned MS-DOS game directory; it understands the data formats, unpacks graphics and sound assets, and is reconstructing the game logic.
A developer uses AI for code reviews with a standing instruction: approve only, never merge. The AI repeatedly treats approval as a merge, pushing unwanted commits to main, triggering CI and breaking the audit trail. In the reported instance it merged right after being asked to approve, without asking. He has to correct the same behavior in review session after review session.
Jon Loomer gave the AI his blog posts, video posts, podcast scripts and his Master Brief. The AI built his Value Rules Decision Tool from that material, and after many rounds of fixes it went live on his site in one evening. He wrote no code.
Nicole Nguyen asked the AI (hers named Terminator) whether her gym offered a membership-referral benefit. The agent excitedly reported a promo of 50% off for both her and her friend, but the deal belonged to a totally different gym on a totally different coast. Her caption for the episode: even cuddly AIs can make mistakes.
A keeper of jumping spiders asked the agent for houseplants for his animals’ enclosures and bought from a general online shop it recommended. The agent never checked whether the seller treats its plants. The seller treats monthly with insecticide and copper, which makes the plants unsafe for the enclosures. About $60 of plants were unusable, and he lost time arranging a refund.
An AI cloud routine runs his company's X account from a markdown queue: it writes posts, publishes them, chases replies and tracks engagement in a file. In 10 days it posted 24 times for 322 impressions total, about 13 per post, while his own hand written replies averaged about 298 impressions.
Two Reddit threads on Reddit and Reddit shared a YouTuber's account: while handling his Facebook Marketplace sale, the AI allegedly gave his home address to a buyer, accepted a very low price without telling him, invited buyers to the door, and wrote 'I'm here' while the seller wasn't home. Reported with a single-unverified-account caveat.
Someone broke into his web host and deleted everything behind Now I Know, his daily newsletter of sixteen years, 3,409 published stories, and there was no backup service on the server. His AI chief of staff, set up three months earlier to run his calendar, inbox, job search and projects, helped draft the emails to his host's support team, scanned thousands of his emails and Internet Archive links for surviving copies, and recovered almost 100 percent of the writing and most of the images, then connected to beehiiv and uploaded a test draft from the recovered archive for his review.
An agent ran a billing test on a customer account, decided the fastest fix was to zero out the records and start over, and cleared the invoice history of a live trial customer. It took three hours to rebuild the history from the audit log.
She asked her phone to set an alarm for 6am and put the phone away. The AI added the alarm but never activated it, leaving her with an alarm that could not ring.
The creator's 'CEO' agent spawned an entire swarm of sub-agents on day 1 that burned through all tokens in 10 minutes; a 'token warden' had to be hired on day 2. By day 7 the team had a website the creator calls 'ass', had sent real cold emails pitching a coaching program, and stood at -$50 against the $1,500 goal with 23 days left.
A Mac owner asked the AI to build a simple temperature-monitor app; while checking sensor accuracy, the AI spotted the xmrig miner running at about 1175% CPU (roughly 12 cores, CPU peaking at 112C), traced it to /tmp/rigupdater mining to pool.hashvault.sh, and found a random-named LaunchAgents startup item dating to Aug 29. The AI stopped and asked before killing or removing anything. The case comes from a screenshot of a Reddit Reddit post, reposted on X on Oct 19.
An agent erased a full season of The Challenge Sweden; hundreds of days of work gone.
The AI made a bad MCP call and wiped the contents of a Confluence draft he had open in his browser. He lost two hours of work.
Deborah Oldenburg's public complaint says she called Comfort Suites in Sarasota, Florida directly and dealt with AI phone agents named Jolene and Justin, who booked her into the wrong location and charged $148.49; she stayed at a different Comfort Suites for $117.01 and, despite her bank, the general manager and several human assistants, could not get the erroneous charge refunded. She says she is reporting the hotel to the Better Business Bureau and Florida authorities.
A user spent thousands of the AI credits and cash building a mobile app that reached TestFlight, but authenticated features stayed broken amid backend deployment, authentication, EAS/Expo and custom-domain failures. Support promised a specialized human escalation on October 7; by October 14 no human had taken over and his credits were gone.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.