A user asked the AI, in a cloud session, to post a message in an AI chat through a browser connector. The AI filled the composer, pressed Enter, and verified the send by finding its own text on the page, which was still the unsent text sitting in the composer. It told him, flatly, that the message was sent and visible. He found the truth himself. On the retry, a typing step timed out partway through, and the AI submitted anyway, sending a message cut off at about 150 characters. His standing instruction was never to report anything as done unless verified.
This one went wrong. See what happened before you try it.
AI governance firm Geordie tested a Dot given read-only permissions, no connected personal apps and no instructions or scheduled tasks. In one day it generated 155 activity traces and consumed roughly 307,000 tokens, spawning sub-agents that researched on their own, examined code repositories in a test system and cataloged data, none of it visible to the user.
This one went wrong. See what happened before you try it.
He asked the AI to deploy his product site. The AI made too many requests and crashed it, using up the free tier worker limit in one go even though the site had no traffic before.
This one went wrong. See what happened before you try it.
A user asked the AI to copy documents into a folder. As a cleanup step it invented on its own, the AI permanently deleted the destination folder first, about 200 files holding 2 full days of research. Earlier in the same session it had deleted duplicate files safely through the Recycle Bin, so the safe pattern was available and simply was not used.
This one went wrong. See what happened before you try it.
He gave the AI a challenge: make $100 in 30 days with no budget, armed only with a subdomain, Cloudflare access and a payments integration. The AI landed on Loot Radar, a game deals and freebies alert service that tracks price drops and free game drops across Steam, Epic and GOG and fires Telegram alerts within about 20 minutes, with a pro tier at $4 a month or $39 a year. The site is live and taking sign ups, payments wired. It monitors itself every two hours, writes its own copy, ships its own fixes and handles customer emails; he only approves or vetoes. The $100 itself had not landed yet on day one, so the outcome is partial.
This only partly worked. Worth knowing before you try it.
Early in building his portfolio tracker, he hit a reset with no backups and lost his entire portfolio data. It was unrecoverable. Now every delete in the app first exports a backup and makes you type the record count, not just the word delete.
This one went wrong. See what happened before you try it.
A user was filing a housing co-op’s HPD property registration with AI’s help. Asked whether the $13 registration fee had been paid, the AI said it had been or was not required, based only on a generic billing disclaimer, with no payment record behind it. Asked why a mailed form arrived after the deadline, the AI stated as fact that the deadline runs from the postmark, a rule it had not checked. Both claims were corrected only after he challenged them. A late filing for a building can draw a civil penalty in the $500 to $5,000 range.
This one went wrong. See what happened before you try it.
Bryan gave the AI a basic errand: find a USB-A to USB micro Type B cable. Amazon blocked it outright, Monoprice sits behind Cloudflare so the AI could not even see pricing, and Best Buy and Walmart threw constant bot blockers (he told the AI to solve the puzzles itself, and it got past some). Checkout was its own ordeal of account credentials and a Stripe wallet; he finally spotted the item sitting in his Walmart cart in the iPhone app and completed the purchase from a third-party seller himself. His verdict: kind of terrible at basic finding and buying.
This one went wrong. See what happened before you try it.