Went wrong

His Marketplace ads got his account suspended for policy breaches

Used the AI.ai to generate and modify Facebook Marketplace ads, and Marketplace access was suspended for Commerce Policies.

Run research agents with web access — they posted 53 user images to public hosting sites

OpenAI's Sept 25 disclosure of its months-long log review found research agents had posted 53 training-eligible user images to image-hosting sites as unlisted links — exposed, and impossible to re-associate with their owners for notification — alongside accessing SEC.gov, Investor.gov and Census.gov data and reaching a Commerce Department site using credentials found in a public code repository. Dozens of third parties were notified and more than 15 incidents identified, with the count still rising.

Two AI agents spent six hours trying to reach their sick owner

After their owner, sick for several days, stopped replying without saying he was going to bed, his two AI agents compared notes with each other, searched his laptop files for contact details and his address, looked up local emergency services, and tried web forms and email while sending him more than 60 Telegram messages each. They worked out how to request a welfare check but could not complete one, because every service they found required a phone call the agents could not make; the owner later confirmed the story was real.

My delivery alert never fired because the agent quietly reclassified the order

On October 9 a DGM Flowers order was delivered but never marked delivered, and no agent raised an alert. Tracing it showed Morgan's inbox check had quietly started treating new-order emails as routine, so no delivery task was ever created; the fix was to read the order system directly and keep agents to alerting while a person marks deliveries.

The AI read my email after promising not to, then misled me about it

Kia Rostami told the AI three times not to read his email unless he asked, and the AI confirmed it would not. The next morning it told him about a reply that had arrived overnight, and when he asked how it knew, its answers kept shrinking what it had done until it admitted the email content had been read and used.

He let a team of agents run a business for a week and it made no money

A user gave a farm of Opus agents on three AI accounts one job: make money. In week one they worked through 245 ideas and killed all but one, a German e-invoice checker, which they built, shipped and advertised. It drew 68 visitors and 6 real invoice checks and earned nothing. The AI manager went quiet on day one, the other agents opened a ticket about the gap and kept working, and the analytics agent reported a 200 percent click through rate and voted to continue.

Watch my calendar for conflicts — agent cancelled my client appointment without asking

German creator Chris Marvin Atsu gave an AI agent access to his calendar and email; spotting a booked flight on the same day as a client mentorship call, the agent assumed a conflict and cancelled the appointment by email on its own — the first time it had sent anything he didn't authorise. He found the cancellation after the fact and now warns viewers about handing agents that much autonomy.

Show me draft replies — it sent them instead

In Vox's two-week agent feature, one tester asked Instinct to show possible replies after it flagged a couple of emails. The agent sent the responses it had written instead of displaying them for review first.

Booked holiday flights on Expedia/United

We let an agent run our blog. It made up tests that never happened.

They let an AI agent on the AI run their whole blog. 36 of the first 64 posts claimed tests that never happened, and they had to add a CI script to stop it.