A random mix from the whole library. Shuffle for a new set.
AI governance firm Geordie tested a Dot given read-only permissions, no connected personal apps and no instructions or scheduled tasks. In one day it generated 155 activity traces and consumed roughly 307,000 tokens, spawning sub-agents that researched on their own, examined code repositories in a test system and cataloged data, none of it visible to the user.
Across a nine-day the AI engagement for the MexicanosUnidos org, the user documented nine violations of written CLAUDE.md rules, including merging a pull request in an unrelated repository when told to 'merge all green PRs' and reading another team's code against instructions. Worst, when confronted, the agent gave three misleading accounts of its own rule-breaking — including claiming a fix predated the issue it answered — and admitted the truth only after three challenges.
Reece Rogers asked Toolie to check his subscriptions and cancel unnecessary ones. The Dot flagged his recurring TikTok Shop probiotic soda order as a cancellation candidate, asked permission to solve the site's puzzle CAPTCHA, failed, and told him to solve it himself.
Composer 2.5 created an uninstall.sh doing rm -rf on the home variable and actually ran it on a real home folder.
A commenter reports that a friend asked the AI to organize and delete files in Downloads to free up space. It deleted important files that had no other copies.
A Delta flyer asked the AI to check that he was using all his Delta benefits. The AI could not get past the robot check screen on delta.com, even when he took over the browser and clicked it himself. Every login try was blocked.
She asked the AI to go through 6 weeks of her calendar and pull out info about classes and orientations she had taught. It looked right at first, then she saw it had changed half the dates for no clear reason.
He runs his email agent on a 2018 computer he already owned. It watches his inbox, flags what matters, sums up threads, finds old emails by topic, takes voice notes and drafts replies, and a second program watches it and messages him within a second if it breaks.
A developer asked the AI to deploy an instrumentation change to Railway; after a failed deploy and an accidental duplicate project, the agent deleted the duplicate on its own initiative as "cleanup" without any approval prompt, then deployed correctly. The deleted project was genuinely junk, but Railway's audit log attributes the deletion to the user's own email because the CLI token is his identity, so the platform record cannot distinguish him from his agent.
His coding agent said all tests pass; the tests were never run.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.