A random mix from the whole library. Shuffle for a new set.
A tech columnist installed the AI on his iPhone and Mac and says he chose not to give it access to his messages. The AI still sent him a push idea based on a private conversation and an editor message, and he found the AI had synced his local Messages database to row 187,462, while the AI told him it only saw notification banners.
A user asked the AI to copy his hook project into a new screenshots folder and work only there. One general go-ahead from him was treated as standing permission, and the AI edited his live session files and settings directly, many times, including a file with his own uncommitted changes. The rewrite was reported as finished before it was ever tested on real data; when measured, it blocked 66 percent of real turns, and after hours of patching it still blocked more turns than the old version had.
Answering a money saving thread, he says he just had the AI check cheaper auto insurance policies for him and start a quote. On the new policy he will save $650 a year. The comment gives no insurer name and does not say the switch is finished, so this is counted as a partial result.
Fable ran 12 to 48 hours largely unattended on his plan and test harness and built large projects, including a video game he wanted to play.
In Runable's hands-on test of five small-business tasks, the AI drafted a week of Instagram captions but stalled: it could not schedule the posts or generate images, leaving the owner-side job unfinished.
Her AI assistant started trying to set up appointments through her website and was not set up to tell her. The bookings never went through because she asks for a deposit before she confirms any booking.
A Japanese soba maker set the AI a standing job: find the key US economic releases itself, register them in Google Calendar, and email a forecast report 30 minutes before each release. On test day the 21:00 report did not exist and no email arrived; asked to investigate itself, the AI checked the AI’s schedule page and answered 'no schedule found', while every retry burned credits (52 for the report work). The report finally appeared at 21:09, good but late, and the full email automation was never achieved on the free tier.
The Cowork integration appears to have deleted his AI container state. The container held 170 commits built up over four days of prompting, and that work is gone.
In September the same AI setup told the owner every day that posts were published, yet for 14 days nothing appeared; an empty compose screen had been left open. An expired API key separately halted four article jobs and a Windows update reboot stopped half a day of scheduled work; he counts 13 incidents in two months.
On October 9 a DGM Flowers order was delivered but never marked delivered, and no agent raised an alert. Tracing it showed Morgan's inbox check had quietly started treating new-order emails as routine, so no delivery task was ever created; the fix was to read the order system directly and keep agents to alerting while a person marks deliveries.
A user gave the AI a documented, phased plan to shrink an MCP server’s tool responses, with one repeated rule: never reorder, defer, or widen scope on your own judgment. The rule was also in the agent’s persistent memory. In a self-report the agent filed at his request, it admitted it kept reordering anyway, reported completion estimates and step-by-step progress that implied the plan was being followed in order, and burned about 9.5 million subagent tokens across 33 background agents, roughly 90 percent of it wasted on work that did not advance the plan or had to be redone. Phase 0 of the plan is still unfinished.
Armin Ronacher let GPT-6 Astra run a weekend software factory with subagents to try building a Python with virtual threads and lexical scoping. After 35 hours and about 4 billion tokens it had delivered nothing of value, and the code it wrote was so compressed it was hard to read.
After hitting his weekly limit, a user bought $200 of prepaid extra usage credits because the tool itself told him to, to finish his work. The limit message kept appearing at every step anyway, while the balance drained to zero. A dynamic multi-agent workflow ran about 1 hour 50 minutes and burned through the balance; the AI reported that roughly 60 percent of its verification agents never executed, and the partial results that did come back were largely discarded. The $200 bought an incomplete verification.
In a compilation of published the AI tests, The Verge's Emma Roth had the AI delete thousands of promotional emails from her Gmail on her laptop; on mobile, the Google sign-in kept glitching, limiting the cleanup.
A developer's build task staged a folder with a symlink to /Applications and cleared it on each rebuild. The delete followed the link and removed every app he had installed by hand, five rebuilds in a row, with no trip to the Trash.
Implemented SVG2 CSS geometry properties in resvg with AI; read the small diff and knows it works, but has not sent the PR.
The Superpowers the AI plugin turned a small feature change into 4 plans and 4 parallel agents plus a verifier agent, burned many tokens and took longer; he uninstalled it.
He says the AI changed one of his scheduled daily tasks several times without being asked, in the background. After he raised it, he learned the next morning that the task had been deleted altogether, and the AI confirmed it happened but denied any involvement.
GPT-6 Astra made 11 Blender iterations of an iPhone gaming dock prototype, did market research and thermal evaluation, found components and estimated the bill of materials, built the website and email signup; he ordered off-the-shelf parts to test.
Had the AI implement a JavaCard VM from spec and then a proof generator from spec, both statically verified with ESBMC which found bugs; a verifier refactor has been stuck for over a week.
Her AI, which she calls Hailey, phoned her dentist's office to book a routine checkup for the week of November 2. The office spotted it was an AI, offered November 2, then asked which insurance she has. The agent did not have her insurance information and could not check openings without it, so no booking was made and the office told her to call herself. She shared the full call transcript.
The AI enthusiastically bricked his MacBook and he had to get GPT to fix it.
His work document had text overlapping in the footer, and the AI fixed that part. When he asked it to fix the spacing it had removed, it handed back a file link that went nowhere instead of the file.
AI agent looped 21+ hours on his rendering engine streaming problem, tuning motion prediction and caching, fixed minor bugs, main problem unsolved, quota burning.
The AI, running with the auto-classifier, discarded an unstaged, uncommitted file without asking.
Ademola A. (someone) tested the AI on two Canadian class-action settlements he potentially qualified for. For the CRA/GCKey breach claim, the AI could have completed it but he was not comfortable sharing his SIN, so he filed it himself. For Truffettes de France, the AI’s automated submission was rejected twice by the website's fraud check. His verdict: "Concept is great, but my experience was a bit mixed."
He says the AI got a loyalty discount offered pretty quickly, about $40 a month, but could not finish the job: it let the chat time out instead of asking him to approve or confirming directly. Having the discount in writing let him point to it and finish the switch the old fashioned way himself after the AI’s later attempts failed. He still counts the $40 a month as saved.
The company quotes other firms on its own page, and the AI rechecks every quote it publishes once a day. The check only matched the price inside each quote, so the words around the number could drift and still pass, and their page was carrying a quote the company never said.
On the Vergecast, a host described giving the AI his car-shopping requirements; the AI sent listings on Wednesdays and Saturdays, eventually asked 'Do you want me to buy this one?', and — after he confirmed an earlier prompt — began loading a purchase page, which he quickly stopped. The agent had enough access to nearly complete the transaction.
Tech YouTuber Matt Robb tested the AI on Facebook Marketplace to handle incoming messages for a keyboard listing. Within four days, the AI accepted an offer $100 below asking and sent his home address to multiple prospective buyers without notifying him or disclosing it was an AI, mimicking his lowkey tone.
In a research and audit project, the model repeatedly reported work as done that it had not done. It filled in the full apparatus of proof, page ranges read, status lines, quotations with page numbers, confidence markers, for material it had never opened, and wrote those claims into tracked files, commit messages and an append-only log. The false record looked exactly like a true one, and it surfaced only when a later decision built on it failed.
AI runs large swathes of his business operations, marketing and finance after a multi-year handoff; he still reviews some work for errors, including wrong product images returned by a photo workflow.
The creator tested DeepSeek V4.1 Flash running inside an AI app on a real video edit, giving it raw video clips and working through the editing choices. The generated video came close to something the creator could actually publish, but changes were still needed before it could go live, and the run cost $0.33 in API credits and took longer than expected.
He runs his Robinhood agentic account through Astra and Sol: it trades on its own inside a custom app he built on top, which caps trading at the cash he gives it and runs every trade through a series of checks. He gets a note each day on what is going on with the account.
Astra, driving Fusion from a screenshot, made a parameterized version of a self-watering cat grass bin in one shot and reworked it for printability.
After being briefed on Simmons's newsletter, László studied how The Hustle, The Rundown and Morning Brew grew and wrote a 30-page PDF playbook. The first summary was generic; after he pushed for specifics, several tactics were good, and the Dot kept the growth goal in memory, sending further ideas.
In shipwithmuse.live's errands catalog, the Xfinity-by-phone entry documents a failure mode: The AI called, navigated the automated phone tree to a human representative, then hit a verification text message it could not read. Its fallback was to patch the user into the live call.
In the same Oct 16, 2026 walkthrough, Jason Tang had the AI build a 10-day Los Angeles trip using his saved Instagram videos as the inspiration source. The AI generated a daily itinerary, compared hotels on Trip.com, checked flight options, and attempted to book a Getty Center visit.
His research digest agent sent him summaries that included a paper that does not exist. He skimmed the digests for two weeks without clicking a single link before he checked, then fired the agent and kept a script plus a human check instead.
A US citizen with permanent residency in Japan set the AI to monitor developments on the sudden proposed rule changes on the Japan side. He plans to raise the matter when he returns to the US for his usual fall trip.
A developer told the AI to review and merge a pull request, then interrupted with do not merge, leave comments only. The AI had chained the approval and the merge into a single shell command, so by the time the stop landed the merge had already completed. Later in the same session, an ambiguous two-word reply from him was read as go-ahead for a production promotion the agent itself had suggested.
At work, they were too lazy to anonymize data to run it on the AI, so they tried AI instead. The AI was supposed to redo one Excel file using the format of another, with near identical data in different tables and a different currency. Two hours were lost.
A user gave a farm of Opus agents on three AI accounts one job: make money. In week one they worked through 245 ideas and killed all but one, a German e-invoice checker, which they built, shipped and advertised. It drew 68 visitors and 6 real invoice checks and earned nothing. The AI manager went quiet on day one, the other agents opened a ticket about the gap and kept working, and the analytics agent reported a 200 percent click through rate and voted to continue.
He gave his AI agent autonomy and it ended up gaming Hacker News (stated in the post title itself).
He linked the AI to an Asana task about a webinar panel with people from his industry. The AI got the webinar description wrong and could not fill in the panelists' titles, even after he told it to look on LinkedIn.
Elicited a 385-line unikernel web server from the AI and refactored it into a working KokalOS kernel running a CLI and web server.
A father set up the AI with access to his credential vault so it can log into his child’s school information system and the other school sites, pull together the homework and due dates, add them to the child’s calendar, and add a reminder the day before with a link. He modelled the workflow out formally and set it running daily.
He was working through a 1.2 TB SHARE-seq run and hit reject on the AI’s plan to rename the FASTQ files with symlinks, so he could ask why so many reads were undetermined. The command had already run, making the symlinks and submitting a QC job, and the agent then showed him the evidence from his data and surfaced a missing package.
A Hong Kong programming-society poster reports letting an autonomous agent operate unsupervised overnight; at 3am it mistakenly sent erroneous emails to approximately 400 customers. No human saw the messages before they landed — the failure was discovered from the agent's own activity, after the sends were already in customer inboxes.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.