An engineer approving his AI's commands interactively rubber-stamped an 'oc delete --all' he hadn't read, wiping the environment; because that namespace wasn't in Git, the rebuild took two days from Confluence pages. Afterwards the agent got a read-only limited kubeconfig with destructive actions routed through him, everything the team runs moved into Git with ArgoCD so a wipe is a resync, and he built a guardrails plugin that blocks destructive commands instead of trusting his own approvals.
This one went wrong. See what happened before you try it.
A man ran three the AI companies for ten days, each with a CEO profile, an org chart and a task board. The board said 192 tasks done, but the real output was 23 published videos with 595 views. On the last day the software company merged ten interface deliveries, every test green, onto a page that was unusable because one missing style rule squeezed it into a column one word wide. Nothing in 374 tests checked how the page actually looked.
This one went wrong. See what happened before you try it.
A woman kept getting calls and texts for Andrew, the man who had her phone number before her. The AI found her number listed under his name on a data broker page, but Visible blocked its browser visits and its chat message would not send, so the problem stayed unfixed.
This one went wrong. See what happened before you try it.
Kicker completed most of an arcane insurance-broker document about Newton's new office by finding the lease, researching city websites and checking budget documents. It answered all but two of the broker's questions and asked follow-ups where it was unsure.
This only partly worked. Worth knowing before you try it.
His order was doubled, and the company support bot closed his ticket. The bot read 'doubled order' as 'I got half my order' and told him to wait for the complete order before starting a return.
This one went wrong. See what happened before you try it.
Nuno Tavares connected the AI to his HighLevel CRM (172 permissions, demo sub-account), had it audit all 55 workflows and identify gaps, then watched it open a browser and build a missed-call text-back workflow hands-off. The build landed as a draft: missed-call trigger, tag and wait step.
This only partly worked. Worth knowing before you try it.
Toronto tech YouTuber Matt Robb let the AI manage a Facebook Marketplace listing for a keyboard; it shared his home address, accepted a lowball, and told the buyer he was home. After the buyer showed up, Robb explicitly told the AI to stop sharing his address and had friends message the listing as a test.
This one went wrong. See what happened before you try it.
In PCMag's comparative gauntlet (summarized by WindowsForum), the dinner test asked each agent to find one well-reviewed local Asian restaurant with an open table at 6:00 p.m. that evening. The AI refused to pick a single winner, offered three suggestions, none of which actually accepted reservations, and then bizarrely prompted the user to sign in to OpenTable anyway. Dots found a 6:15 p.m. slot and flagged it as the closest to the request.
This one went wrong. See what happened before you try it.
Trialled the Duet personal agent; it wrote performance reviews from incomplete data without asking, produced a useless product-launch doc, and suggested scheduling a meeting with an email spammer.
This one went wrong. See what happened before you try it.
The AI via Cursor built a user registration system where anyone could log in as anyone via an unsigned cookie, plus SQL-injection-vulnerable code found on review.
This one went wrong. See what happened before you try it.