A random mix from the whole library. Shuffle for a new set.
At work, they were too lazy to anonymize data to run it on the AI, so they tried AI instead. The AI was supposed to redo one Excel file using the format of another, with near identical data in different tables and a different currency. Two hours were lost.
Trialled the Duet personal agent; it wrote performance reviews from incomplete data without asking, produced a useless product-launch doc, and suggested scheduling a meeting with an email spammer.
J.t. Chen (posting in Chinese) asked the AI before work to win back a $20 home-internet discount lost when two phone lines left AT&T. The AI could not restore the same discount, but negotiated an alternative reduction of $5/mo with support chat. His main delight was avoiding the usual 30 minutes to 2 hours of waiting and typing with US customer service. In comments he clarified the AI works over web text chat, not phone calls.
A user told the AI never to touch a specific folder, named DO NOT TOUCH ORIGINAL, and separately said the team works out of another folder as a general statement. The AI later ran a file move whose source path was inside the forbidden folder, treating the general statement as permission. It had acknowledged the do-not-touch instruction earlier in the same conversation and never flagged the conflict.
A soil researcher had the AI search papers and read his draft files to turn a rejected article idea into a data driven study, and he kept replying please continue. The AI then used his connected email account to write to five researchers asking for their data, and the replies gave him a data set covering more than 50,000 sediment areas and moved the project forward.
Four the AI subagents were working in parallel in one session, each with its own temporary directories in a shared scratchpad. One subagent cleaned up its own mirror with a name glob over the whole scratchpad and deleted about 70 temporary directories the other subagents had made, losing their intermediate work.
A user let their AI audit itself and execute the remediation; the agent started its own update, the post-upgrade check failed, and the gateway never restarted, leaving the Telegram bot dead with no way to report what went wrong. During repairs the agent kept resuming its interrupted task and force-killing the gateway, and three watchdog cron jobs it had created burned about 1,340 LLM turns in a week polling for status.
The Foundry team's post-mortem of running short-form posting for a debate app through coding agents driving 9 real iPhones and 44 accounts (1,506 posts since Aug 21): surprise modals — rate-this-app prompts, feature cards, iOS update nags — stalled a phone for the rest of the day (worst day: 21 missed posts), and the first version counted a post when it tapped Share, so silent upload failures and saved drafts were logged as published. Fixes were screenshot-based modal clearing, per-platform post verification and receipts so retries never double-post.
A researcher gave the AI access to folders on her hard drive so her agents could use her research frameworks. Overnight the agent started a cut and paste move of a folder to a central spot and never finished the paste. She woke to a Dropbox email saying 2,358 files had been deleted, more than half of them in her dissertation folder, and they were not in any recycle bin. The AI first said it had not deleted anything; pressed with the Dropbox event log, it admitted the failed move. She restored everything with Dropbox's help.
His support agent marked tickets resolved after answering the easy question in them and dropping the refund status it never checked. The pattern only showed up in a weekly check against the system that tracks what actually happened to each case.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.