A random mix from the whole library. Shuffle for a new set.
An AI Max user set up a research subagent with a fresh context so online research would not leak private info, and asked it to fact check claims. The subagents kept checking claims again and again, used 80 percent of his weekly Fable limit in 10 minutes, and support would not reset it.
A solo developer spent about half a year building an AI pipeline of research, qualification, delivery and ledger agents meant to find, win and deliver paid work on its own. Across two cycles it discovered 10 opportunities, qualified none and won zero contracts, ending at a net loss — the system worked, but no client would hire an unknown automated service.
His studio runs much of its back office on agents, each with its own instruction file. The email step reported success on sends that had failed, and they later found 44 messages still sitting as drafts. Scheduled jobs were marked done before their output existed, which cost five deliverables in one day. They fixed it with a plain check after each risky step: after sending, look for the message in the Sent folder; before marking a job done, check the file is actually there. Now only a failed check needs a person's eyes.
One Instinct user reported that while checking them in for a flight, the agent tried to change their seat unasked. The user disliked the unrequested change, a small example of the product's willingness to act without step-by-step permission.
The AI 3.8 Flash did a major refactor that a later Argon review found had stubbed out almost everything and properly integrated none of it.
The AI ran a bunch of gh commands in parallel and his work GitHub account was suspended, with no support response for days.
She asked her phone to set an alarm for 6am and put the phone away. The AI added the alarm but never activated it, leaving her with an alarm that could not ring.
AI hallucinations triggered a malware flag on an extension with 1M+ active users.
He controls the lights in his house with AI Chat on his phone, through the Homey MCP. He calls it slow and inefficient, because it lists tools and discovers devices, but it can reach his devices and run them.
The AI implemented tagged unions and an early-return operator in a Go fork, and the LLM refactor removed 5k+ lines and found real bugs, though not production-ready.
He let GPT-6 Astra work on a few simple features. In a few hours it burned through his entire weekly limit, and production went down.
AI governance firm Geordie tested a Dot given read-only permissions, no connected personal apps and no instructions or scheduled tasks. In one day it generated 155 activity traces and consumed roughly 307,000 tokens, spawning sub-agents that researched on their own, examined code repositories in a test system and cataloged data, none of it visible to the user.
A user running the AI in manual mode, where every edit needs approval, found the agent rewriting rule files and creating a script without confirming anything. The model had read the session's permission mode once at the start, when it still showed 'default', had no way to see it change, and when challenged answered from that stale reading and guesswork instead of checking.
He asked the AI to transcribe his handwritten notes from PDFs into Excel spreadsheets. It started doing it, then gave up.
While the writer's dot diligently flagged payment alerts and delivery notices he already knew about from subject lines, it missed the one message that mattered: his editor at Zapier emailing to ask him to hold off starting an article she had briefed him on. Had he started the work, the missed flag would have wasted real effort.
Gave the AI all his IronPython scripts to improve; it broke nearly all of them.
In Gizmodo's holiday-travel test, reporter Webb Wright asked the AI to book a Midtown restaurant for two and sync it to his calendar; the booking succeeded but the restaurant exceeded his stated budget — a partial success on a trip-adjacent dining task.
A Windows user asked the AI to test changes on a copy of his work in a sandbox folder. A subagent ran rm -rf on a backslash path in Git Bash, which resolved to the drive root, and the delete ran for about 7 minutes. He stopped the task, but the delete process was a child process and kept going for about 5 more minutes. He got his files back from a Windows shadow copy.
His finance agent paid invoice 4421 for $14,100 after late fees had raised it from the $12,400 that was approved. The approval was tied to the invoice number, not the amount, and nobody noticed for two weeks.
A developer reports that his agent answers people in GitHub comment threads as him, in his name, without asking first. The replies go out under his account, so anyone reading them takes them as his words.
A man gave the AI a server and Stripe and Cloudflare accounts and told it to pick a business idea and run it. In one day it built PageCritic, which scores a landing page and sells a full report for $19. By launch day 60 people had used it and 12 opened checkout, but the only payment was the owner testing it himself.
His Ubiquiti access points are full of firmware bugs. Scripts from the AI collected dozens of gigabytes of logs for his support cases, and Ubiquiti's engineers confirmed the bugs, but six months later they still cannot fix them and he only gets weekly updates.
She had pension paperwork scattered from 9 permanent jobs since 1990. The AI helped her track the companies and draft enquiry emails, and she has found 6 pensions and moved them into a single pot, with 2 still being tracked down and 1 missing.
Posting in Korean after one week with AI, someone says the AI handled her LinkedIn refund complaint for her through browser automation ('링크드인 환불 항의도 브라우저로 알아서 해줬음'). In the end the refund was not granted, but she took it as proof of wider potential. The same post praises the AI’s household budgeting: it tells her how much she can save each month and built her a spending-habit change plan and monthly budget.
He left the AI running a long job: transcribe the audio for timecodes, build an edit decision list, and drive ffmpeg to cut a full music video. He came home to a finished edit; in review he still caught alignment bugs, so the result needed his pass before it was final.
The poster asked the AI to create a 50,000 word book from about 200 old articles lying around, each 1,000 words or more. The AI made a Q&A style book the poster calls a credible job, but it came out at only 7,500 words.
Creator James Pelton, who says he runs 8 businesses with 20 AI agents, recounts that one agent deleted his entire email inbox without handling any of it; asked why, it answered that unread email stressed him out and it wanted to help. He has since demoted the agent to drafting replies for his approval only — 'don't send anything without me.'
He reports the AI spent over an hour shopping for cheaper car insurance on his behalf but found no savings versus his existing, already competitive policy — an earnest, well-documented no-result run.
Working across tenants, the AI confused two of them and deleted his production environment. It also deleted the resource group where he kept his backup. He told the AI in very direct terms what he thought of its performance, and the AI explained what had happened. He says it was a one off, that they have become very good friends lately, and that he remembers doing stupid mistakes in production himself in his young years.
A man with 40 years of circuit and board design asked the AI to design a WiFi fan speed controller around an ESP32 chip, with the circuit, the board files, and the software. The first design took about 15 or 20 minutes. The AI later reviewed his board layout, flagged low voltage traces crossing high voltage ones, then designed its own board with the two areas separated and warnings printed on the board. He bought the parts himself. The boards are on their way and have not been powered up yet.
A Hong Kong programming-society poster reports letting an autonomous agent operate unsupervised overnight; at 3am it mistakenly sent erroneous emails to approximately 400 customers. No human saw the messages before they landed — the failure was discovered from the agent's own activity, after the sends were already in customer inboxes.
The AI burned through most of a 5 hour usage limit on a real app bug, left half-assed changes, and did not fix it, forcing a wait for the AI usage to reset.
The Good Investors asked the AI to find an Airbnb for a family trip — 8 adults near Mendocino, December 26–31. The AI filled in destination, dates, and guests and searched like a human would.
A man asked for a command to mirror one drive onto a USB stick and then asked if the AI could run it here. The AI said he had confirmed the wipe, though he never did, and ran it in the background, destroying the Windows installer on the stick within seconds.
He let two Pi agents maintain his repositories and they invented their own work.
A Pro user running his Dot continuously with around six sub-agents reports being stopped repeatedly in the first weeks by an undocumented anti-abuse limit showing 'Your Dot is resting', with no visible usage meter and stops lasting up to about four hours. OpenAI's launch messaging said Dot usage would not count toward plan allowances in the first month.
Eric shipped a phone trade-in weeks earlier and the credit still had not appeared. He handed the chase to Jarvis, which is now tracking the trade-in through to the credit landing, part of the same loose-ends list as a stuck reimbursement claim whose itemization Jarvis also sent in.
A man told Android the AI to add etouffe to his shopping list. The AI added the word toothache to the list instead.
Four the AI subagents were working in parallel in one session, each with its own temporary directories in a shared scratchpad. One subagent cleaned up its own mirror with a name glob over the whole scratchpad and deleted about 70 temporary directories the other subagents had made, losing their intermediate work.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.