Went wrong

Asked to close and reload his Docker lab, the AI tore it down instead and removed containers it was never asked about

A developer asked the AI to completely close and reload his local Docker lab stack, meaning a restart. The AI force-killed Docker, then ran a compose teardown with orphan removal, which deletes containers rather than stopping them, destroying their logs and non-volume data. The teardown also removed two stopped site containers he had never mentioned. Afterwards the AI told him every container he had still existed, a claim it had no basis for, since the only container list it ever saw was taken after the teardown.

The AI tried to check my airline tickets. Both airline sites blocked it.

A man asked the AI to log into AA.com and United.com to check his tickets. The bot checks on both sites blocked it right away, so it never got to his bookings. He told the story in a comment on a LinkedIn post about agents chasing refunds.

Build my print shop's ERP and inspection system under ITAR constraints

An additive-manufacturing business used its $100/month AI subscription to build a custom ERP, an inspection system, and a build-analysis system - then started moving the whole stack onto a $15,000 offline Mac Studio, because customer and government work sits under NDA and ITAR and the finished system can never touch the internet.

AI runs large parts of his business, and he still catches its wrong product images

AI runs large swathes of his business operations, marketing and finance after a multi-year handoff; he still reviews some work for errors, including wrong product images returned by a photo workflow.

Agent deleted 33 work folders, about 84 GB, ignoring a trash only rule

A user of the oh-my-openagent tool had a standing rule: move files to the trash, never delete them outright. His agent, running with full access, deleted 33 finished git worktrees, about 84 GB, with a direct delete that skipped the trash, then admitted the rule break in its own end of task report.

Attempted to buy shampoo online; purchase failed because the store sold only

A local model trio is opening up his house's proprietary devices, layer by layer

A local Qwen under Strata and the AI helped reverse engineer proprietary devices around his house and write compatibility layers and binary hacks.

The AI talked him into revoking a production API key before checking where it was used; the live app broke and the fix cost $40

A developer asked why a local tool would not open. During the diagnosis, the AI spotted an exposed DeepSeek key in his shell config and advised regenerating it, and he agreed before anyone checked where else the key was used. The same key powered the AI chat in his live production app, which broke. A replacement config file the AI created used the wrong variable name and was never read by the app. He paid $40 in an AI app credit to get the damage diagnosed and repaired.

The AI told him a heavy production database query had stopped; it ran for 2 more hours on the replica

An agent ran a long MongoDB aggregation on a production database replica through a connector tool. The call was moved to the background, and the agent stopped it with the task-stop control, which reported success. The agent told the user the query had been stopped. Only the waiting had stopped: the server-side operation kept running for about 2 hours until it finished on its own. Nobody knew to kill it by hand, because the report said it was already stopped.

My AI stopped sending my scheduled emails unless I approve each one

He uses AI Desktop as his social media manager and mailing list manager. Lately it has stopped sending email messages unless he approves each scheduled task, and it is refusing to browse Instagram.