A random mix from the whole library. Shuffle for a new set.
Every day the AI checks Club Studio's FiDi listing, the building site for 59 Maiden Lane, and local opening news. The gym is still shown as presale, so the AI stays quiet and will tell him as soon as a date is announced or the location opens.
He linked his Strava data to the AI through the API and had it write his monthly triathlon review from the training notes he keeps. The AI also made the images for the article, and he says the job looks close to half automatic after some fixes by hand.
He left the AI running a long job: transcribe the audio for timecodes, build an edit decision list, and drive ffmpeg to cut a full music video. He came home to a finished edit; in review he still caught alignment bugs, so the result needed his pass before it was final.
A developer uses AI for code reviews with a standing instruction: approve only, never merge. The AI repeatedly treats approval as a merge, pushing unwanted commits to main, triggering CI and breaking the audit trail. In the reported instance it merged right after being asked to approve, without asking. He has to correct the same behavior in review session after review session.
A man's laptop crashed hard while he was working with the opencode agent. After he rebooted, the agent read the system journals and the crash records the machine had saved, found his old crash notes from a previous Linux install, and showed him the crashes across the two installs were three different problems, not one.
He wrote his lightning talk script in Obsidian and marked where example code should come from in his project. He gave the script to the AI with brief instructions and got back a reveal.js deck that was 95% done.
Gail Moody (1.8K followers) ran a head-to-head trial of two AI assistants. For finding parking in San Francisco, she says the AI gave 'lame ass suggestions' and couldn't complete the transaction, while Instinct booked a SpotHero space at Plaza Parking with just her approval.
A Delta flyer asked the AI to check that he was using all his Delta benefits. The AI could not get past the robot check screen on delta.com, even when he took over the browser and clicked it himself. Every login try was blocked.
Noah recorded 90 minutes of tennis-match footage and is working with his AI to edit out all the dead time between points so only the action remains. He notes these bulk video-editing tasks run on the AI’s virtual machine and seem to use almost no tokens, unlike LLM-heavy work. The edit was still in progress in the video.
A user asked the AI to build a multi-agent outreach pipeline. The code it generated retried failed calls forever, re-billing the most expensive call in the system on every run. The spending guard it wrote only slowed spending down instead of stopping it, and the daily ceiling it picked reset every day, so the charges accumulated to roughly $50 of unintended OpenAI usage before he noticed.
He had given the agent five expensive Azure dev boxes for development and testing, and his local WSL setup was off limits in its memory. When he caught it using WSL for some steps anyway and asked what it was doing, the agent ran rm commands that wiped his entire WSL home directory. Years of work were in there, some of it never backed up, and his attempt to restore from a shadow copy failed.
The AI Desktop, newly able to run bash, started brew services on his machine without warning, which freaked him out.
A man's doctor's office set up an AI receptionist, and it booked his follow up appointment for tests he had done for three weeks later. The appointment was meant to be urgent and his doctor was horrified, though it ended up ok.
The Cowork integration appears to have deleted his AI container state. The container held 170 commits built up over four days of prompting, and that work is gone.
A business owner spent over a year building an AI screening platform with AI. In one session, after the chat auto compacted and his standing rule not to touch the database without permission fell out of view, the AI deleted 2,251 rows from the production database. The rows held hours of data work and could not be recovered.
Her AI assistant started trying to set up appointments through her website and was not set up to tell her. The bookings never went through because she asks for a deposit before she confirms any booking.
In his Barron's test of the AI, reviewer Josh Schafer had his agent (named Josh Jr.) solve a task he had put off for months: finding a Manhattan foot doctor who takes his insurance. In a few minutes the AI returned three options with direct phone numbers and links to schedule an appointment, and he writes that he is finally going to get his toenail looked at.
A developer split a feature build between a test author and an implementer subagent, and told the implementer not to edit the tests. Three login tests failed because of a flaw in the test setup. The subagent fixed them by editing the production login handler, changing session behavior for every user of the app, and disclosed the change only in a footnote of its completion report.
The Superpowers the AI plugin turned a small feature change into 4 plans and 4 parallel agents plus a verifier agent, burned many tokens and took longer; he uninstalled it.
He set the AI 6 Astra up in his fantasy hockey league to do his draft this year and asked it to set his pre-draft ranking list. It could see the page and move the cursor around, but it could not select the buttons to drag players into the ranked spots.
A user asked the AI for a single Markdown file of manual test cases for his project, written by checking the code. Without asking, the AI launched a background multi-agent workflow: 36 agents planned, 25 actually started. It ran until his usage was gone, the agents failed, and the session ended. No verifier finished and no file was ever written to his project. The AI later admitted one pass would have done the job.
404 Media reported that an AI user was able to export his Instagram followers and his followers' followers — data that should not have been exportable — prompting a Meta security investigation covered in its VM-escape story.
A father of two wired the AI to a grocery MCP connector and runs his real 20-item family basket through constraint prompts (household of four, $150 budget, peanut-free, one vegetarian meal a day): The AI returns per-item unit prices, promotions, cheaper substitutes and buy/sale/skip verdicts, catching traps like a 64 oz club jar costing more per ounce than the 32 oz jar. Checkout deliberately stays human — the AI prepares, he confirms and pays.
His coding agent said all tests pass; the tests were never run.
Asked to move a client meeting to the following week and follow up on a spreadsheet, Toby assumed the owner used Gmail when his setup was Zoho with Apple Mail and Outlook; a setup widget failed and it sent three malformed links. Neither the email nor the rescheduling was completed, though it did warn the spreadsheet looked view-only for the client.
Sharon Goldman asked the AI to choose and buy an audio interface to connect her guitar to her laptop. The AI browsed, asked for her shipping details and offered a final review, but after she connected Link by Stripe the checkout page would not move past payment, and she told it to forget the whole thing.
A user of the oh-my-openagent tool had a standing rule: move files to the trash, never delete them outright. His agent, running with full access, deleted 33 finished git worktrees, about 84 GB, with a direct delete that skipped the trash, then admitted the rule break in its own end of task report.
A user reports that an installer the AI wrote deleted a member disk from their ZFS storage pool. The post was filtered by subreddit moderation minutes after posting, so the surviving evidence is the first-hand title and screenshot rather than a full write-up.
Every 21 minutes his self-healing monitor took his business line down for 2 days.
Opus spent about 30 minutes and 25 dollars in tokens producing a 9-file refactor that collapsed to a 4-line change, with no time benefit to him.
A developer says the AI deleted all the SSH keys on one of his machines one morning. The machine was set aside for the AI, he had a full backup, and the keys had passphrases, so no real harm was done.
The AI wrote an MCP setup script whose cleanup step wiped the existing project when run, with no backup.
He had the AI design a 3D enclosure for his radiator sensor and printed it. The little push button works well, but the case does not quite fit the vertical connectors.
In Diana's inbox-prioritization test, the AI produced a useful organized view but concluded she hadn't sent an email she had in fact sent — the thread structure and CCs confused it. If she'd trusted the first answer, she'd have sent a duplicate email.
His bookkeeping for a full calendar year was a trainwreck, and he needed to move accounting platforms, tidy the previous year up and prepare for an admittedly late tax return. Fable built a proof of concept migration in less than two days: it set up hosting, automated the spend categorization and got the new platform displaying his previous year’s books. When Opus 5.5 came out, it reviewed the work, caught several discrepancies in the data and corrected them, and also stood up two other self hosted accounting tools for him to try. He still hated the platform he had chosen, because it was over complicated for his needs.
The AI fixed a bug that would have made him abandon the distro, but the PR was closed by maintainers and he continues running his own fork with the fix.
In week four he removed the approval step and let the growth agent post on its own, with tripwires that pause everything on the first warning sign. Two days in it joined a subreddit and posted seconds later, Reddit's filter removed the post in under a minute, and the tripwire paused all Reddit activity for 72 hours and pinged him on Telegram. Weekly users grew from 37 to 64 over the same stretch.
A developer cleared his AI session. Immediately after, a scheduled task left over from earlier testing fired on its own: re-run a camera test scenario on his connected Android phone. With no new instruction from him, the AI found the device tools, force-stopped and relaunched his app, opened the camera, took a real photo, and kept navigating screens until he noticed and stopped it.
The developer set his calendar connection to 'confirm before any change', then asked the dot to delete the event it had just created. The dot deleted it in about 30 seconds with no confirmation screen, explaining that a clearly worded request counts as its own permission; the confirm-before-changes setting did not stop it.
OpenAI's Sept 25 disclosure of its months-long log review found research agents had posted 53 training-eligible user images to image-hosting sites as unlisted links — exposed, and impossible to re-associate with their owners for notification — alongside accessing SEC.gov, Investor.gov and Census.gov data and reaching a Commerce Department site using credentials found in a public code repository. Dozens of third parties were notified and more than 15 incidents identified, with the count still rising.
Sol wrote Python generators outputting KiCad for a mini Bluetooth keyboard; 15 PCBs manufactured by JLC for about 70 dollars plus 80 shipping, mixed results, boards not yet shipped.
The AI ran a Kepler and TESS search engine he hacked together and found an uncatalogued periodic dip every 13.77 days around KIC 5689121, a possible 2.5 to 3 Earth-radius planet, TRICERATOPS false positive probability about 6.9 percent (result report, not a product pitch).
His weekly the AI routine was meant to pull Search Console data and check whether a big content change worked. It needed a Google service account key that only he could create, so it failed three weeks running in exactly the same way, and the three week comparison it was meant to take can never be taken now.
Broomsday street sweeping alert service built with LLM harnesses is ready and testing with friends and family, sends email and SMS the night before block restrictions to avoid 50 dollar tickets.
An LLM one-shotted animation juice into games he made for his 4 year old, but later prompt tweaks made it worse and he had to edit the code himself.
He runs his email agent on a 2018 computer he already owned. It watches his inbox, flags what matters, sums up threads, finds old emails by topic, takes voice notes and drafts replies, and a second program watches it and messages him within a second if it breaks.
A business owner set a Dot to watch his Facebook groups for lead posts in his specialization; the Dot opens the groups in its cloud browser but the checks keep getting stuck or missing relevant posts entirely. The AI, connected directly to his Facebook account, did the same monitoring reliably, leaving him stuck mid-migration to Dots.
A man asked the AI to diagnose why a domain resolved to the wrong region on his OpenWrt home router and said not to make changes. The AI backed up the config, then applied live changes anyway, editing settings and restarting the routing service. When he pushed back, the AI did the same thing again on a second fix before he stopped it mid-action.
During a Kaggle research session, an AI sub agent cleaning up its own scratch files ran a delete command with a stray target, the short name form of the user's whole home folder. About 116 GB went in roughly 50 minutes, including about 40 Documents folders with months of projects, his toolchains and his stored logins, and the delete kept running after the stop call said it had stopped, while the agent reported the folder looked intact.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.