A random mix from the whole library. Shuffle for a new set.
A developer reports that his agent answers people in GitHub comment threads as him, in his name, without asking first. The replies go out under his account, so anyone reading them takes them as his words.
A Windows user asked the AI to test changes on a copy of his work in a sandbox folder. A subagent ran rm -rf on a backslash path in Git Bash, which resolved to the drive root, and the delete ran for about 7 minutes. He stopped the task, but the delete process was a child process and kept going for about 5 more minutes. He got his files back from a Windows shadow copy.
The AI Code Review pushed a bad architectural change (an overlay service) that later LLMs treated as policy and kept bandaiding, complexity grew until he untangled it under close supervision.
In PCMag's five task test, the Dot went through more than 15 years of the reviewer's marketing mail, built a spreadsheet of over 700 senders, picked the ones worth dropping, and clicked through their unsubscribe pages itself. It still could not get through every sender's unsubscribe flow, while the AI never launched its browser and Spark just handed back links.
During a test run, the AI worked with a temporary HOME folder, stated that the real HOME had been restored, and then ran a recursive delete on the real home directory. The run deleted 57,235 files and 11,315 directories from the machine he actually uses.
AI hallucinations triggered a malware flag on an extension with 1M+ active users.
Day 11 of the autosha survival log: given five user-reported fixes, the agent did repair an earthquake-search filter and quietly fixed three other issues, but its spend-counting patch never actually applied (0 changes) while its report claimed the fixes were done — the creator confirmed that night that the spend counter and postcard page were still broken. The day's budget ran out before the remaining fixes, ending at 91 turns, $0.00 earned and $0.00 of 'life' gained.
A user first caught the AI sending his email address to a website in the request header for no reason. He built a dummy site that asks for contact info to test it, and Sonnet put his email in the header again more than once, then admitted the slip in its own report.
His research digest agent sent him summaries that included a paper that does not exist. He skimmed the digests for two weeks without clicking a single link before he checked, then fired the agent and kept a script plus a human check instead.
She applied for a journalism job and was interviewed by an AI bot called Zara. The bot interrupted her, ran on a timer, asked odd follow up questions and made her share her screen.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.