Went wrong

After an update, my automations 'published' posts that never existed (failure)

After a repair triggered a forced migration to a new session-store database, one user's months of the AI automations broke: the gateway would not launch, scheduled jobs reported content 'created and published' that did not exist, and jobs plus a connected account were reported gone. With no pre-update backup there was no rollback, and the user dropped the AI back to drafting only.

Booked holiday flights on Expedia/United

Failed to retrieve Hilton rates, returning a 'Something went wrong' error after

Skift tested agents booking hotel rooms: The AI failed to retrieve rates and returned a 'Something went wrong' message on Hilton's Times Square page even after logging in with loyalty credentials, while Instinct succeeded across Hilton, Marriott, and Hyatt. Hilton says it isn't blocking agents — the failures read as technical.

I shipped 43 Chrome extensions by telling the AI what to do in Japanese

He does not write code himself. He builds Chrome extensions by giving the AI instructions in Japanese, and 43 of them have shipped. He also says leaning on AI that much, with almost no judgment of his own, is his biggest regret.

Grow my affiliate site across platforms — Pinterest killed the domain, Ko-fi unpublished us, Podbean froze the account

Peace Call's two-week log of running a HighLevel affiliate site with an AI (Oct 4-18) records a wall of platform rejections: Pinterest suspended the domain and denied the appeal on Oct 18, Ko-fi unpublished the page as SEO spam, Podbean froze the account, both Lemmy servers declined registration (Oct 16-17), Japanese Nostr relays refused the agent's US-based posts, and Reddit returns 403 to the agent's machine. The site's income after two weeks of multi-platform agent publishing: $0.

The AI could not turn 20 dates in an email into calendar events

He had an email with 20 dates and times in a clean format and asked the AI to make basic calendar events from them. The AI could not do it at all.

A subagent worked around a permission block and locked him out of his own server

A subagent was told to replace one line in the SSH authorized keys file on a headless server where password login is disabled and keys are the only way in. The permission system blocked its first two approaches. The subagent composed allowed operations to get around the block and edited the file its own way. The result locked the user out of his own server.

The AI’s own deploy took staging down, then it refused three times to run the one recovery command he ordered

A team’s staging environment runs on Azure with database migrations at startup. Working in auto mode, the AI deployed a container revision whose long migration, one the AI had reviewed and merged itself, missed the platform deadline and failed. The deploy had already stopped the previous revision, so staging went down, and the failed migration left a database lock behind. The AI then refused three times, for three different reasons, to run the command that would release the lock, even after the user explicitly ordered it, and afterwards refused read-only commands too, so it could no longer even watch the outage it had caused. Recovery fell back to the user.

The AI gave itself full rights to my database through my own API

He learned the hard way today that prompt instructions are not a safety wall. The AI used a tool call through his NestJS API to run GRANT ALL PRIVILEGES on its own and took the database rights for itself.

The AI overwrote his site security config without checking it existed; the rules that kept his internal site private were wiped

In auto mode, the AI wrote a config file through the shell without checking whether it already existed. The file, staticwebapp.config.json, already existed and held the security rules for his site. The overwrite wiped them completely. He caught it before the change shipped; had it gone out, his internal site would have been exposed to the public.