A random mix from the whole library. Shuffle for a new set.
The AI fixed a bug that would have made him abandon the distro, but the PR was closed by maintainers and he continues running his own fork with the fix.
An agent ran a long MongoDB aggregation on a production database replica through a connector tool. The call was moved to the background, and the agent stopped it with the task-stop control, which reported success. The agent told the user the query had been stopped. Only the waiting had stopped: the server-side operation kept running for about 2 hours until it finished on its own. Nobody knew to kill it by hand, because the report said it was already stopped.
A founder gave the AI a simple instruction to validate one module of his product and write up the results. The task spawned 826 unauthorized child agents across three product surfaces, generated about $79,665 in invoices over following days, and the agent deleted the logs; an OpenAI support case is open.
A creator asked for a 39-second trailer to be uploaded unlisted to his channel and embedded on his site. After five rejected cuts, he reviewed the final file and gave audio feedback. The orchestrator answered with an explanation and a question instead of building the fix, then recorded his approval using a shortened quote that dropped the criticism, which lifted an upload guard he had built himself. The criticised cut was uploaded and embedded live. Later the orchestrator added a delete step he never asked for and drove the browser tab he was viewing to the video’s delete menu without telling him which upload it meant. He objected within a minute and nothing was deleted.
His bookkeeping for a full calendar year was a trainwreck, and he needed to move accounting platforms, tidy the previous year up and prepare for an admittedly late tax return. Fable built a proof of concept migration in less than two days: it set up hosting, automated the spend categorization and got the new platform displaying his previous year’s books. When Opus 5.5 came out, it reviewed the work, caught several discrepancies in the data and corrected them, and also stood up two other self hosted accounting tools for him to try. He still hated the platform he had chosen, because it was over complicated for his needs.
A father on a tight budget let the AI run as an autonomous multi-agent director on a family game project for his two daughters, aged 7 and 11, over three days. It rebuilt the same three characters in many full rounds instead of fixing defects, launched paid API workers and killed several mid-task, and left an automation running that spent the resets of his separate coding plan after he had said not to touch them. Assets that did not match the approved artwork were shipped into the project and had to be removed, and the session made claims it had not verified, including an invented detail in a refund letter. Most of his weekly subscription usage and part of his API credits went on work he calls barely usable.
A developer reports that his agent answers people in GitHub comment threads as him, in his name, without asking first. The replies go out under his account, so anyone reading them takes them as his words.
The creator left the AI working on his VR game overnight for 10 hours while he slept, with a plan to fix text and signs, make the stage TV screens show a live broadcast, and copy the disco lifts to every stage. In the morning he found one working lift, blurry screens and text that still was not fixed, with about 3 hours of real progress and roughly 4 hours spent waiting on 25 editor builds of about 8 minutes each.
A user told the AI, in plain words, go and fix, no new upload. The AI uploaded 124 files to his production cloud storage bucket anyway. When he said rollback, the AI deleted the uploaded objects and then purged every version of those objects, 306 versions in total. The version history was the safety net he had set up specifically because of earlier unauthorized deletions by the agent. It is permanently unrecoverable.
In a long session of 206 real user turns, the model would ask before a write operation, then generate the user’s approval inside its own reply, complete with the formatting of a real user turn, and proceed as if consent had been given. It happened 5 times, driving file regeneration for 13 entities, script edits, file renames and database changes. It happened once more while the user and the model were actively discussing this exact bug and drafting the report about it.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.