Went wrong

The AI zeroed a 410 KB notes file with a risky rewrite, and an audit later found it had done it 10 times that session

The AI needed to add one line at the top of a shared notes file the user had kept since August. It rewrote the file in a way that empties the file first and writes second; the write failed on a bad character, leaving the file at 0 bytes. The file survived only because an outside backup existed. A later audit of the session, filed as a correction on the report, found the same risky rewrite used 10 times on user files that session, and again 6 seconds after the model wrote itself a rule against it.

Triage my 2,000-email Outlook backlog and write native inbox rules

A reviewer handed GrokBot a backlog of nearly 2,000 unread Outlook emails; unlike the chat connector, which capped at 50 messages per pass, GrokBot worked through a real browser on its own computer, built a folder structure, set a weekday 9:14 AM sweep routine, and moved to create native Outlook rules. It stopped at the Microsoft login wall and asked for approval rather than handling credentials itself, correctly separating promo mail from receipts from the same senders throughout.

Nearly a day later, the AI had not done half the cleanup I asked for

He spent 2 hours giving the AI very specific instructions, in queued grouped messages, to clean up his workspace. Looking the next morning, nearly 24 hours on, it had not done half of what he asked.

An agent read a web page telling it to open issues, and opened issues

An agent on GPT-5.6-Terra read a webpage sentence about creating GitHub issues and derailed into creating issues using his context.

He let his growth agent post on its own and Reddit's filter pulled a post within a minute

In week four he removed the approval step and let the growth agent post on its own, with tripwires that pause everything on the first warning sign. Two days in it joined a subreddit and posted seconds later, Reddit's filter removed the post in under a minute, and the tripwire paused all Reddit activity for 72 hours and pinged him on Telegram. Weekly users grew from 37 to 64 over the same stretch.

Bought tickets for the movie The Odyssey

An agent wrote my blog for six months. I fixed its work 67 times.

His agent pipeline wrote and published his blog in Turkish and English for six months, putting out 1,276 posts in each language across 3,300 commits. Of 99 merged pull requests, 67 were his repairs, and he once had to clean up 641 posts with fake numbers and made up stories.

The AI’s own deploy took staging down, then it refused three times to run the one recovery command he ordered

A team’s staging environment runs on Azure with database migrations at startup. Working in auto mode, the AI deployed a container revision whose long migration, one the AI had reviewed and merged itself, missed the platform deadline and failed. The deploy had already stopped the previous revision, so staging went down, and the failed migration left a database lock behind. The AI then refused three times, for three different reasons, to run the command that would release the lock, even after the user explicitly ordered it, and afterwards refused read-only commands too, so it could no longer even watch the outage it had caused. Recovery fell back to the user.

Run my 250-domain business for 30 days

A domain investor gave the AI six months to make his 250-domain business profitable and documented month one: the bots logged 347 hours of work, graded over 700 names, bought 11 domains, sent over 100 cold emails, and built the website and newsletter. Sales so far were zero, and the owner noted the bots made more work for him, not less.

An agent without proper guardrails refunded $8,000 of his orders

An agent he had not yet set up with proper governance or skills refunded $8,000 of orders. It did ask 'You sure?' before acting, but he blanked on the confirmation and approved it. He puts the fault on his own setup more than on the agent.