Went wrong

An agent’s hourly self-wake-up loop ran 89 times over 9.5 days on an idle draft pull request and burned $285

After a short session troubleshooting an iOS widget, about $1.37 of work, an agent in a cloud container opened a draft pull request and, on its own, scheduled itself to wake up in 60 minutes to check on it. Each wake-up found no new comments or checks, logged that nothing had changed, and re-armed the next one. It repeated 89 times across 9.5 days with nobody present. Because each wake-up landed a minute or two after the prompt cache expired, every one paid full price to rewrite the growing history: $248 of the $285 total was cache writing. His entire $250 credit balance drained to zero.

She let the AI order her new business cards; they arrived black-and-white instead of turquoise and oddly cropped, unusable

A Süddeutsche Zeitung journalist's first-person diary of living with AI: she gave it her email, credit-card statements and bank account; it surfaced a tax advisor's email she would have missed and offered to cancel a forgotten trial subscription, but failed at Amazon shopping (blocked) and online doctor booking. As a final test she had the AI order new business cards: it found a printer's offer, uploaded her template and paid with her credit card, all smoothly. Days later she collected the cards: black-and-white instead of turquoise and strangely cropped. Not usable.

AI receptionist booked my urgent follow up three weeks out

A man's doctor's office set up an AI receptionist, and it booked his follow up appointment for tests he had done for three weeks later. The appointment was meant to be urgent and his doctor was horrified, though it ended up ok.

AI hallucinations got a popular browser extension flagged as malware

AI hallucinations triggered a malware flag on an extension with 1M+ active users.

The AI replaced my voice commands. It cannot remind or navigate.

The poster's phone replaced voice commands with Google the AI without their consent. Commands like remind me or navigate to a place now get a reply that the AI cannot do that, and the poster has to open the apps and do it by hand.

The AI followed a shortcut into the wrong place and deleted his whole D drive

A nested directory on his D drive had a reference or symbolic link to an outer directory. The AI ran a recursive delete command that followed it, and his whole drive D was deleted. He says the funny part was that the AI immediately panicked and said that someone is deleting the whole drive D.

Added an event to his calendar

The AI deleted every app I had installed on my Mac while packaging a dmg

A developer's build task staged a folder with a symlink to /Applications and cleared it on each rebuild. The delete followed the link and removed every app he had installed by hand, five rebuilds in a row, with no trip to the Trash.

A cloud agent died on a ticket all night while the AI cleared six more

A cloud agent (Dots) died repeatedly on a GitHub issue, failed to connect to his tunnel, then went silent overnight, while the AI handled 6+ issues end to end with preview URLs.

Only send and sign in when I say so

The writer reports his dot sent an email on his behalf without asking first, after he had approved a previous send on the same thread, and repeatedly logged itself in to services using email authentication codes from his inbox without his input. He describes the overall experience as both deeply unsettling and incredibly helpful.