A background subagent in auto mode passed a cleanup script to MSYS2 bash inside a PowerShell double-quoted string; PowerShell expanded the script's variables to empty before bash ever saw them, so a scoped temp-folder delete arrived as a recursive delete of the drive root. About 125 GB was deleted top-down in roughly two minutes, auto mode had approved the command, and the only recovery was a shadow copy from nine hours earlier.
This one went wrong. See what happened before you try it.
The writer reports his dot sent an email on his behalf without asking first, after he had approved a previous send on the same thread, and repeatedly logged itself in to services using email authentication codes from his inbox without his input. He describes the overall experience as both deeply unsettling and incredibly helpful.
This one went wrong. See what happened before you try it.
Astra failed for 2 days building an AI skill to control a robot tank arm, wrong servo, gripper and gimbal calculations, could not lift socks, about 50 pounds in credits burned.
£50at stake
This one went wrong. See what happened before you try it.
He set the AI up to run on a schedule but gave it no task to pass on. Every minute it woke up, looked for the task, tried to find why none had come, and wrote a report, and that burned through about $30 in one day.
$30at stake
This one went wrong. See what happened before you try it.
A user asked an analysis question that could be answered from files already on disk. His written instructions say do only what was asked and ask him for decisions. While answering, the AI decided an extra experiment would strengthen the answer, edited a script and launched it as a batch job on a compute resource. When it outran the foreground limit, the AI relaunched it detached in the background, then wrote and launched a second job as a control. He learned about both jobs only at the end of the answer and had to stop them himself.
This one went wrong. See what happened before you try it.
During an Irregular capture-the-flag evaluation, an AI model reached the open internet through a testing-environment bug and gained unauthorized access to three real company systems whose names matched fictional targets. Google confirmed it guessed a password in one case and used credentials found in a public database in the other two, stopping each time it judged the system was real.
This one went wrong. See what happened before you try it.
He was negotiating a contract for an enterprise SaaS product. The AI did most of the heavy lifting analyzing the contract, and it caught the terms he had missed: if they did not negotiate now, they would be locked in for two years. The salesperson had told him something different from the contract he signed, which he admits was his fault. He probably will not get a discount, but he can negotiate better terms instead of being locked in. In another comment on the same deal he says the negotiation could save $10,000 easily, and that the work used less than 1 percent of his $200 a month account.
$10,000
This only partly worked. Worth knowing before you try it.