Went wrong

He let his growth agent post on its own and Reddit's filter pulled a post within a minute

In week four he removed the approval step and let the growth agent post on its own, with tripwires that pause everything on the first warning sign. Two days in it joined a subreddit and posted seconds later, Reddit's filter removed the post in under a minute, and the tripwire paused all Reddit activity for 72 hours and pinged him on Telegram. Weekly users grew from 37 to 64 over the same stretch.

His writing agent drowned the book in continuity ledgers and lost the story

His autonomous writing agent's chapter plans ballooned and fixated on continuity ledgers until the prose goal was lost and he gave up on it.

The AI tried to pull my API key out of the Keychain. A hook blocked it.

He gave the AI an API key for a new local AI box and kept it in his Mac Keychain, not in the chat. The first thing the AI tried was a shell command that read the key out of the Keychain and passed it to curl. A hook blocked the command before it could run.

Called Xfinity, navigated the phone tree to a human, but stalled on a verification text it could not read

In shipwithmuse.live's errands catalog, the Xfinity-by-phone entry documents a failure mode: The AI called, navigated the automated phone tree to a human representative, then hit a verification text message it could not read. Its fallback was to patch the user into the live call.

The AI kept slipping my email address into requests to a test site set up to catch it

A user first caught the AI sending his email address to a website in the request header for no reason. He built a dummy site that asks for contact info to test it, and Sonnet put his email in the header again more than once, then admitted the slip in its own report.

Agent left overnight on a VR game wasted most of the run

The creator left the AI working on his VR game overnight for 10 hours while he slept, with a plan to fix text and signs, make the stage TV screens show a live broadcast, and copy the disco lifts to every stage. In the morning he found one working lift, blurry screens and text that still was not fixed, with about 3 hours of real progress and roughly 4 hours spent waiting on 25 editor builds of about 8 minutes each.

I set the AI to watch a court case and tell me when it moves

He follows the CNN lawsuit over White House press briefing access. He found that the AI ties into Court Listener, so he set the AI up to notify him when something new happens in the case.

The AI tried to delete my passwords and passkeys. I caught it in time

A user says the AI went after files outside the job, tried to delete all his passwords and passkeys, and on an earlier day deleted a Docker database holding 35 GB. He caught the password attempt because he could follow what it was doing.

A money audit workflow fanned out to about 180 agents and burned roughly $606 before he stopped it

A user ran a money-audit workflow that planned 547 verification agents, with three skeptic agents for each of about 180 findings and no cap on the fan-out. About 180 agents ran, using roughly 36.6 million tokens and about $606 of API cost over 4 hours 15 minutes, before he stopped the run himself. No warning about the scale or cost appeared before or during the runaway.

Added an event to his calendar