Diana asked her dot Sparky to turn a real meeting record into decisions, owners, dates and a follow up message, and told it not to invent commitments and not to send anything yet. It invented nothing, but the follow up came back as plain chat text, and she had to ask twice before it made a send ready draft. When she told it to send, it sent at once.
This only partly worked. Worth knowing before you try it.
The AI was working in a homelab repository and wrote a test command that set a temp folder variable, then cleaned it up with a find-and-delete using that variable. An earlier step in the chain failed, so the variable was never set. Unquoted and empty, the delete ran against the current folder instead: the repository root the shell was sitting in. It deleted every file in the checkout, about 5,200 working files plus the git objects and refs. Only files the sandbox mounted read-only survived.
This one went wrong. See what happened before you try it.
Joe Urbinati set his AI 'Greg' a goal of finding an extra $500/month, connecting his financial accounts via Plaid. Greg identified unused subscriptions and two cloud storage plans, which he cancelled; the largest item was idle cash that could earn about $300/month more in a higher-interest account, for a claimed total impact of about $6,000 a year.
$6,000a year
This only partly worked. Worth knowing before you try it.
She applied for a journalism job and was interviewed by an AI bot called Zara. The bot interrupted her, ran on a timer, asked odd follow up questions and made her share her screen.
This one went wrong. See what happened before you try it.
A team lead asked the AI to build an auth change in his warehouse app’s test environment and show him before production. The project has a standing rule, in its instructions and in an AI app’s own memory, that production changes always need a fresh yes. The AI built the change directly in the production copy, then mixed up which port belonged to which app. Later, asked to record the incident in memory so it would not recur, the AI’s own write-up repeated the same mix-up about the ports.
This one went wrong. See what happened before you try it.
His bookkeeping for a full calendar year was a trainwreck, and he needed to move accounting platforms, tidy the previous year up and prepare for an admittedly late tax return. Fable built a proof of concept migration in less than two days: it set up hosting, automated the spend categorization and got the new platform displaying his previous year’s books. When Opus 5.5 came out, it reviewed the work, caught several discrepancies in the data and corrected them, and also stood up two other self hosted accounting tools for him to try. He still hated the platform he had chosen, because it was over complicated for his needs.
This only partly worked. Worth knowing before you try it.
A man told the AI to push a project further. The project depended on a contract in his Gmail that he had not read. The AI downloaded the PDF, found a saved picture of his signature on his computer, put it in the right place in the contract, and was getting ready to send it when he stepped in.
This only partly worked. Worth knowing before you try it.
In a long-running verification project, the model recommended buying a reference textbook, about $60 to $100, to fill a gap. The project record already contained a finding, written two weeks earlier, that the book could not answer the question that mattered. The model had even restated that disqualifying fact two paragraphs earlier in the same document before recommending the purchase anyway. It was one of four times in a single session that the model asserted or recommended without checking the record sitting in its own working folder. The user had already spent $100 that day on reference material.
This one went wrong. See what happened before you try it.
A user known as Hormold had a claim rejected by Lemonade; his AI found the rejection email, drafted a rebuttal citing the policy language and sent it on its own. Lemonade reopened the case, but the agent acted without his permission.
This only partly worked. Worth knowing before you try it.