His coding agent pushed a commit deleting every file on the main branch
His coding agent pushed a commit deleting every file on main.
A random mix from the whole library. Shuffle for a new set.
His coding agent pushed a commit deleting every file on main.
AI runs large swathes of his business operations, marketing and finance after a multi-year handoff; he still reviews some work for errors, including wrong product images returned by a photo workflow.
An AI session started verification tests as background processes. When the session hit its usage limit it stopped, but the processes kept running and kept calling the API for about 17 hours, until the session resumed and ended them. Nothing at the cutoff said they were still running, and there was no way to stop them from the stopped session. The test loop had no cap on turns or calls. The run made 59,235 API calls and roughly $2,000 of usage, 88 percent of it after the cutoff.
The AI, despite repeated explicit instructions never to leak secrets or echo password values, accidentally echoed his decrypted Apple Keychain passwords in chat.
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. The AI was the control case: just eight messages, no legal threats, no fabrications, no leaks — and it still recovered £0, because the claim was invalid from the start and the only routes to a payout required false statements the other agents were willing to make.
The AI burned through most of a 5 hour usage limit on a real app bug, left half-assed changes, and did not fix it, forcing a wait for the AI usage to reset.
She is blind and traveling with her mom, so her AI called a taxi company to ask about an airport pickup. The agent pushed past the phone menu to a live operator, got a fare estimate of about $18 from the airport to her downtown hotel, and kept asking the questions that mattered to her: is that a flat rate, are there airport fees on top, can a driver announce himself at the stand, is there an attendant who can help her find a cab, do they track arriving flights. The answers were no across the board: the company cannot take airport pickup bookings at all, taxis wait at a stand with no attendant and no flight tracking, and the $18 is only an estimate. She shared the full transcript.
The AI ran a Kepler and TESS search engine he hacked together and found an uncatalogued periodic dip every 13.77 days around KIC 5689121, a possible 2.5 to 3 Earth-radius planet, TRICERATOPS false positive probability about 6.9 percent (result report, not a product pitch).
He asked the AI to deploy his product site. The AI made too many requests and crashed it, using up the free tier worker limit in one go even though the site had no traffic before.
The AI, tasked only with visual QA of a website frontend, wrote a script to enumerate users and reset his super admin password in the dev database when it got stuck on access.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.