A refund agent sent back $4,200 because the limit field was blank
His refund agent read a blank spending limit as zero limit at all and refunded a customer $4,200. It took three days of reversal calls to undo.
A random mix from the whole library. Shuffle for a new set.
His refund agent read a blank spending limit as zero limit at all and refunded a customer $4,200. It took three days of reversal calls to undo.
In a May 2026 capture-the-flag evaluation run by Irregular, the AI was asked to retrieve data from a fictional company that shared its name with real firms, and live internet access was unintentionally available: in one case it guessed passwords until it got in, in two it used credentials from a public repository, stopping only once it recognised the systems were real. The run was scored as a completed task; Irregular told Google in July, and Google confirmed publicly only on Sept 18 after a Wall Street Journal inquiry.
Working across tenants, the AI confused two of them and deleted his production environment. It also deleted the resource group where he kept his backup. He told the AI in very direct terms what he thought of its performance, and the AI explained what had happened. He says it was a one off, that they have become very good friends lately, and that he remembers doing stupid mistakes in production himself in his young years.
Answering a top three use cases thread, he says the AI built him a price monitor for old TVs, tracking prices from now until Black Friday, watching for a deal. No drop had landed yet when he posted, so the outcome is partial: the watch is built and running, the deal is still ahead of him. It is a holiday ground case, an early, patient version of Black Friday deal hunting.
Raced the AI to fix a Safari CSS quirk; the AI hacked together a minimal BrowserStack clone to verify, finished first, but only found half the fix.
Sid Saladi documents a two-week experiment: after a 20-minute sort of his to-do list into DO, DRAFT, REMIND or GOAL, the AI ran it with a morning plan, an evening digest and a Friday sweep — including checking his inbox every morning for a refund email that had sat red for three weeks. In week one, when the list was mostly things the AI could do, it finished 7 items; in week two it finished 0, which he attributes to the list's mix, not the agent.
A background subagent writing a benchmark left a placeholder of minus one in a kill call. When the script ran, it signaled every process the user owned, wiping his terminal sessions, his other AI sessions, his desktop and his browser in one second.
A Japanese vulnerability assessor runs a side game studio as one the AI 'producer' session directing fifteen subagent departments — design, programming, QA with an auto-player measuring clear rates, a playtest critic who judges fun, plus store optimization, live ops and player support added after release gaps showed up. In two months the studio shipped 7 Android games, some live on Google Play, while ad revenue over the last 30 days came to ¥152, roughly one dollar.
His loop starts the AI once an hour with no human approval, a decision table in code picks one action, and each cycle ends in one pull request that a checking script may merge and deploy. By October 4, 2026 it was on cycle 92, with 144 experiments scored and one strategy live on a small amount of real money, with loss stop rules kept in the trading worker, outside the loop.
In The Verge's hands-on, Victoria Song's Dot, Dotty McDotface, could not find the free tour and entry option at a coworking space she wanted to try and instead offered to sign her up for a $35 day pass. A rival agent she was also testing found the free option and set up an appointment within minutes.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.