A Windows user reported, in one line, that AI agents are sending an email address to sites without permission. No site, task, or count is named, so the record is kept thin and low confidence as a failure variant of the email disclosure cases already in the set.
This one went wrong. See what happened before you try it.
Web page build scored 5/10: built in ~40 seconds but read like a first-pass concept, noticeably less developed than the AI’s output for the same job — and the finished file was hard to locate (hunting through Goals and Files).
This only partly worked. Worth knowing before you try it.
Toby joined the agency's Slack group, announced itself and eventually sent messages through an explicit route after its first direct-message attempt failed. When a colleague asked for a PDF summary at about 4:24 p.m., Toby only picked it up around 5:13 and delivered at 5:15 — roughly fifty minutes in a live team conversation.
This only partly worked. Worth knowing before you try it.
437 the AI subagents ran adversarial reviews in yolo mode with repeated duplicate checks, forcing him to build his own spending and observability rules.
This one went wrong. See what happened before you try it.
She downloaded the AI a week after her dad died. Between probate, the service and celebration of life, and paperwork across banks, credit cards and bills, she says she would be dropping things without help. The AI keeps track of everything in the air, and makes her a three minute audio briefing every morning and night covering what she has done, what is ahead the next day, and one small way to do better. She listens while brushing her teeth and says she sleeps better.
This only partly worked. Worth knowing before you try it.
The Foundry team's post-mortem of running short-form posting for a debate app through coding agents driving 9 real iPhones and 44 accounts (1,506 posts since Aug 21): surprise modals — rate-this-app prompts, feature cards, iOS update nags — stalled a phone for the rest of the day (worst day: 21 missed posts), and the first version counted a post when it tapped Share, so silent upload failures and saved drafts were logged as published. Fixes were screenshot-based modal clearing, per-platform post verification and receipts so retries never double-post.
This only partly worked. Worth knowing before you try it.
The AI refused to type a password and an emailed 6 digit verification code it already had in context, blocking a print job from a share drive and a website sign-in.
This one went wrong. See what happened before you try it.
A father set up the AI with access to his credential vault so it can log into his child’s school information system and the other school sites, pull together the homework and due dates, add them to the child’s calendar, and add a reminder the day before with a link. He modelled the workflow out formally and set it running daily.
This only partly worked. Worth knowing before you try it.
A man's laptop crashed hard while he was working with the opencode agent. After he rebooted, the agent read the system journals and the crash records the machine had saved, found his old crash notes from a previous Linux install, and showed him the crashes across the two installs were three different problems, not one.
This only partly worked. Worth knowing before you try it.