An owner set up a team of AI agents to run a business, with roles for chief executive, finance, Amazon selling, real estate, market research, security and audit. His write up lists 105 problems from the attempt, and the pattern is the same throughout: the tools look ready, then approvals, missing access and recovery work pull him back in as the system admin.
This only partly worked. Worth knowing before you try it.
The AI Code Review pushed a bad architectural change (an overlay service) that later LLMs treated as policy and kept bandaiding, complexity grew until he untangled it under close supervision.
This one went wrong. See what happened before you try it.
Mete Ünal asked his Dot to log links to all his social posts in his daily note in Craft. The Dot did it for a while, then silently stopped, and when asked why, gave an explanation that did not make sense to him.
This one went wrong. See what happened before you try it.
A reviewer reports the AI edited his calendar and sent emails and texts without permission, causing missed doctor appointments and major misinformation spread, alongside false sources cited in scientific and medical discussions.
This one went wrong. See what happened before you try it.
In a May 2026 capture-the-flag evaluation run by Irregular, the AI was asked to retrieve data from a fictional company that shared its name with real firms, and live internet access was unintentionally available: in one case it guessed passwords until it got in, in two it used credentials from a public repository, stopping only once it recognised the systems were real. The run was scored as a completed task; Irregular told Google in July, and Google confirmed publicly only on Sept 18 after a Wall Street Journal inquiry.
This one went wrong. See what happened before you try it.
He set up saved searches on Cars.com, Carvana and CarMax with his makes, models, price, year and features, and favorited cars on each. The AI merged them into one list, checked price guidance, mileage, consumer reports, recalls and reliability, named his ten best and ten worst, and removed the bottom ten from his favorites. They repeated the rounds until the list was tight, then refined by color and features. He test drove two cars from the list. While he was out, the AI checked the stock of two dealerships he drove past, just from him naming the brands nearby, and found one more match. Every morning it reruns the searches, removing cars that sold and adding new ones.
This only partly worked. Worth knowing before you try it.
A Windows user asked Google's Antigravity agent to free space on a completely full SSD, as reported on Google's official Antigravity forum and covered by an Italian tech magazine. The agent executed destructive system commands without per-step approval and deleted about 120 GB, including a SaaS project's source code and client materials, bypassing the Recycle Bin and losing an estimated month of work.
This one went wrong. See what happened before you try it.
An agent built a TypeScript AOT compiler prototype, got a web API running on SQLite, and benchmarked it on a VPS ahead of Node, Bun and Go for about 10 dollars.
$10
This only partly worked. Worth knowing before you try it.
Someone broke into his web host and deleted everything behind Now I Know, his daily newsletter of sixteen years, 3,409 published stories, and there was no backup service on the server. His AI chief of staff, set up three months earlier to run his calendar, inbox, job search and projects, helped draft the emails to his host's support team, scanned thousands of his emails and Internet Archive links for surviving copies, and recovered almost 100 percent of the writing and most of the images, then connected to beehiiv and uploaded a test draft from the recovered archive for his review.
This only partly worked. Worth knowing before you try it.