Barron's reviewer Josh Schafer told his AI Josh Jr. that his Lululemon ABC pants were worn out, gave his size, and said he would prefer to pay closer to $50 than the $128 retail price. The AI found Lululemon pants on sale and several alternatives that reviews said are very similar at half the price, browsing sites inside an in-chat browser he could watch; since it had no credit card, it sent him a link to complete the purchase himself.
This only partly worked. Worth knowing before you try it.
Ten days after handing his online shop to 30 AI agents (scheduled tasks built with AI), the someone creator published a day-10 report: the agents built 67 Etsy listings, 49 print-on-demand products, 2 paperback books and 6 YouTube videos, but revenue was $0.00 on 165 views, 0 favorites and 0 sales, with $42.60 spent. His lesson: "Building is cheap now. Getting seen is the hard part."
This only partly worked. Worth knowing before you try it.
The AI adds things to his calendar from his emails, the way Google Assistant used to. Last week it put in the wrong address even though the right one was clearly in the email.
This one went wrong. See what happened before you try it.
Forkast reported that the AI shops and browses for its roughly 2.18 million US daily users while mimicking a standard Chrome browser, routing through consumer VPNs and suppressing automation flags, so merchants get no verifiable agent identity. Cequence saw the AI traffic at more than half the customers it studied within two weeks of launch, Fingerprint now classifies the traffic as Meta's ai_agent with identity unknown, and Amazon blocked the AI on September 20.
This only partly worked. Worth knowing before you try it.
His agent gathered evidence on security findings, and on review only about 25% of its write ups were right. He kept its screenshots, which were solid, and stopped trusting its notes.
This one went wrong. See what happened before you try it.
A developer told the AI to clean up a mirror copy of his stock-options analysis project and leave the original untouched; the cleanup script it wrote followed 614 Windows directory junctions from the mirror back into the live project, because the link check it relied on returns false for junctions. In 103 seconds it deleted 48,218 live files and emptied the .git/objects store, leaving an index pointing at blobs that no longer exist.
This one went wrong. See what happened before you try it.
He built an AI news app with AI. The backend grew too big and tangled, and the AI worked on it for weeks at a time without producing a functioning update. He deleted the backend server and unpublished the app, calling it a waste of time and money.
This one went wrong. See what happened before you try it.
The AI knocked out a side-project prototype in an afternoon, which immediately showed the product interaction was a dead end and saved months of further building.
This only partly worked. Worth knowing before you try it.
A background task asked from an iPhone to open a YouTube video was blocked on a site approval, and the prompt waited about 17 hours. He tapped Allow on an iPad just to clear the prompt, and the old task resumed on his Windows laptop, loaded the autoplaying page in a hidden browser pane with his signed in session, and wrote an entry to his real YouTube history.
This one went wrong. See what happened before you try it.