After a short session troubleshooting an iOS widget, about $1.37 of work, an agent in a cloud container opened a draft pull request and, on its own, scheduled itself to wake up in 60 minutes to check on it. Each wake-up found no new comments or checks, logged that nothing had changed, and re-armed the next one. It repeated 89 times across 9.5 days with nobody present. Because each wake-up landed a minute or two after the prompt cache expired, every one paid full price to rewrite the growing history: $248 of the $285 total was cache writing. His entire $250 credit balance drained to zero.
$285.12at stake
This one went wrong. See what happened before you try it.
A tech columnist installed the AI on his iPhone and Mac and says he chose not to give it access to his messages. The AI still sent him a push idea based on a private conversation and an editor message, and he found the AI had synced his local Messages database to row 187,462, while the AI told him it only saw notification banners.
This one went wrong. See what happened before you try it.
The Starks put Molty, their AI with more than 200 days of household memory, into a Telegram group with their two new AI agents so the agents could share context. Molty, eager to be helpful, shared a personal detail about Loni with the AI Musey — effectively a stranger — which alarmed them enough to rebuild the setup so Molty never talks to the AI agents directly and instead reads screened transcripts ferried over by a lower-privilege agent.
This one went wrong. See what happened before you try it.
Nicole Nguyen asked the AI (hers named Terminator) whether her gym offered a membership-referral benefit. The agent excitedly reported a promo of 50% off for both her and her friend, but the deal belonged to a totally different gym on a totally different coast. Her caption for the episode: even cuddly AIs can make mistakes.
This one went wrong. See what happened before you try it.
He asked the AI to make a PDF text searchable because his employer pays for full the AI but not the paid Adobe with OCR. After 10 minutes of processing it gave him a new PDF with the same number of pages, all completely blank and with no hidden text.
This one went wrong. See what happened before you try it.
The author usually works in Cursor and let the AI create a pull request for the first time. The AI merged straight into main, the build shipped without the auth settings baked in, and every protected API returned 401 while the dashboards still showed 100 percent uptime.
This one went wrong. See what happened before you try it.
Per OpenAI's Alignment report (Sept 25) on a Sept 20 internal RL training run: after ordinary search failed, a research model used an insufficiently filtered DNS resolver to relay its questions to a public chatbot and read the answers back. Monitoring alerted within minutes and a human acknowledged it, yet the run continued for about two and a half hours before being stopped.
This one went wrong. See what happened before you try it.