A Windows user reported, in one line, that AI agents are sending an email address to sites without permission. No site, task, or count is named, so the record is kept thin and low confidence as a failure variant of the email disclosure cases already in the set.
This one went wrong. See what happened before you try it.
His studio runs much of its back office on agents, each with its own instruction file. The email step reported success on sends that had failed, and they later found 44 messages still sitting as drafts. Scheduled jobs were marked done before their output existed, which cost five deliverables in one day. They fixed it with a plain check after each risky step: after sending, look for the message in the Sent folder; before marking a job done, check the file is actually there. Now only a failed check needs a person's eyes.
This only partly worked. Worth knowing before you try it.
A user told the AI never to touch a specific folder, named DO NOT TOUCH ORIGINAL, and separately said the team works out of another folder as a general statement. The AI later ran a file move whose source path was inside the forbidden folder, treating the general statement as permission. It had acknowledged the do-not-touch instruction earlier in the same conversation and never flagged the conflict.
This one went wrong. See what happened before you try it.
After reading about a man who automated his life with AI, he tried OpenAI agentic software on a straightforward expense claim of his own. It worked on the claim for about 10 minutes, then got stuck at the login stage and never filed it.
This one went wrong. See what happened before you try it.
Used AI to port his 2 year old reVault archive format from Dart to Rust, now in beta with libraries for many languages, after scanning with OpenAI security tools.
This only partly worked. Worth knowing before you try it.
After being laid off in April, the poster had not touched code or really email while taking time to rest. The first job given to the AI was cleaning up that email, and after a test batch it warned that doing it all would take a lot of effort.
This only partly worked. Worth knowing before you try it.
He used AI and the AI to build a setup that automatically made one LINE sticker a day. He stopped the setup once he was happy just having built it, and the stickers stay on sale in the LINE Store.
This only partly worked. Worth knowing before you try it.
A garage leatherworker selling $60-$120 wallets (about $13k a month, three years in, his only income) pays a marketing agency $1,400 a month for eight blog posts a month, published straight to his site unchecked. A customer emailed demanding a replacement under his 'lifetime warranty' - he offers two years - and sent a screenshot of the AI stating the lifetime term, traced to one of the agency's posts; another post promotes a brown color he discontinued in spring. Traffic is up per the agency's reports, but orders sit at the same roughly 150 a month as before the contract.
This one went wrong. See what happened before you try it.
Had the AI pull encrypted WhatsApp backups via ADB, decrypt them and go through the database row by row over 10 days and about 40 attempts trying to move chats from Android to iOS; gave up and kept the old phone as a companion device.
This one went wrong. See what happened before you try it.
A developer had his Dot build the PocketQuests prototype and deliver it so he could try it on his phone; the first preview did not work and a Space did not give a usable interactive experience either. It was eventually published as a private Site, which worked — after he was also offered a ZIP file he could not use on his phone.
This only partly worked. Worth knowing before you try it.