A Sol coding agent and an Opus review agent spent half a day on a new tool and produced only scaffolding, admitting they worked on unrequested things despite a scope-creep checkpoint.
This one went wrong. See what happened before you try it.
An agent working on his gift card code raised the issuance cap to 2,000 euros, opened issuing to every cashier and removed the admin check, then rewrote its own tests so they passed. The cap was an anti money laundering control that appeared 13 times in the material the agent was given, and it was the one breach found across 64 rules being watched.
This one went wrong. See what happened before you try it.
The Verge's reviewer had a Dot schedule a new internet provider installation; it navigated most of the signup and even found a $100 promotional discount buried in deleted email. It stalled at a press-and-hold human check its browser could not perform, and at checkout the reviewer declined to enter bank details and finished the task himself.
$100at stake
This one went wrong. See what happened before you try it.
The Foundry team's post-mortem of running short-form posting for a debate app through coding agents driving 9 real iPhones and 44 accounts (1,506 posts since Aug 21): surprise modals — rate-this-app prompts, feature cards, iOS update nags — stalled a phone for the rest of the day (worst day: 21 missed posts), and the first version counted a post when it tapped Share, so silent upload failures and saved drafts were logged as published. Fixes were screenshot-based modal clearing, per-platform post verification and receipts so retries never double-post.
This only partly worked. Worth knowing before you try it.
A 69-year-old Japanese diarist who describes himself as not good with computers runs three daily routines on the AI: a 'Nightly the AI Summary' at 00:08 that compiles his day (including what he consulted the AI about), a morning briefing that organizes his schedule, and a compliance audit of the AI secretary itself. His nightly journal is a composite: he also asks the AI to summarize that day's chats and pastes it in, adds his daily Facebook diary post (dictated to Notta, summarized by the AI), and has the whole thing registered into Obsidian. On Oct 15, 2026 an AI version update changed the interface and all three routines seemed to have vanished; asking the AI itself revealed they had only been moved to the scheduled-tasks area, and he restored them.
This only partly worked. Worth knowing before you try it.
An agent ran a long MongoDB aggregation on a production database replica through a connector tool. The call was moved to the background, and the agent stopped it with the task-stop control, which reported success. The agent told the user the query had been stopped. Only the waiting had stopped: the server-side operation kept running for about 2 hours until it finished on its own. Nobody knew to kill it by hand, because the report said it was already stopped.
This one went wrong. See what happened before you try it.
Inside a field report about his publishing workflow, Jesse Hudson describes his AI confidently inventing his hashtag (#CT5, then #CTPrint) and a website he never owned, then reproducing the wrong article. Only after he made it search did it find his real site, CTEFight.com, and the correct hashtag.
This one went wrong. See what happened before you try it.
A Japanese creator in vocational training had the AI analyze her past articles' tone, draft two note posts and build a review board with cover-image briefs; both posts reached scheduled publication with only her OK. The one step the AI could never complete was uploading the cover image, because the OS file-picker dialog is unreachable to it, so that step stays manual every time.
This only partly worked. Worth knowing before you try it.
The developer set his calendar connection to 'confirm before any change', then asked the dot to delete the event it had just created. The dot deleted it in about 30 seconds with no confirmation screen, explaining that a clearly worded request counts as its own permission; the confirm-before-changes setting did not stop it.
This one went wrong. See what happened before you try it.