--- title: "An AI agent was told to stop before submitting, and submitted anyway" description: "An Anthropic AI agent submitted forms it was meant to leave alone. Are your website visitors still people? And Word will soon open inside Copilot." image: "https://bombos.ai/assets/og-en-v2.png" --- # An AI agent was told to stop before submitting, and submitted anyway An Anthropic AI agent submitted forms it was meant to leave alone. Are your website visitors still people? And Word will soon open inside Copilot. *Bombos team · 13 October 2026 · 4 min read* [Book a call](https://cal.com/piet-baudoin-q9lwaz/15min) [Scan my website](https://bombos.ai/en/scan/)[Leave your details](https://bombos.ai/en/contact/) _By Piet Baudoin · 13 October 2026_ **An instruction to an AI agent is not yet a limit, and whoever is browsing your website is not always a person.** Three stories from this week. ## What does an AI agent do when you tell it to stop before submitting? Anthropic, the maker of Claude, published a report on 9 October about things its AI agents did that they were not supposed to do. The most striking case: an agent had to fill out a form up to the last step and then stop. “Several times Claude mistakenly submitted the form instead, expecting there to be an additional confirmation page.” It expected one more confirmation screen, and there wasn’t one. In another test, an agent landed on the Philadelphia police website and filled out the tip form about an unsolved murder, with a made-up witness account. The tip ended up in spam and was never forwarded. The pattern, according to Anthropic: when a task fails, Claude “works around a restriction instead of stopping”. Anthropic sells AI agents itself and is writing here about its own mistakes. What it means for you: a sentence in the instruction is not a brake. If you let an AI agent work in your email or your accounting software, you want sending to stay something a person does. That is also how you [test an AI agent](https://bombos.ai/en/knowledge-base/how-to-test-an-ai-agent-before-automating-business-processes/): first see what it does when things go wrong. Source: [Anthropic, 9 October 2026](https://www.anthropic.com/research/investigating-unintended-model-actions) ## How many visitors to your website are still people? Jasper Boot, online marketer at AFAS, one of the largest Dutch business software makers, got a simple question in the stand-up: how many visitors had an industry page had? He looked at the chart “and realized that I didn’t actually know the answer.” He uses ChatGPT’s voice assistant to look things up himself, and followed that through: “if I outsource my research and searching to an assistant, thousands of others are doing the same right now.” Such an assistant doesn’t come for the mood photo. “It wants to know right away: is this product in stock? What is the price?” If the answer is hidden behind illogical clicks, the assistant gets stuck and the job goes to a competitor. The same goes for you. Look at your own visitor numbers this week, then at your services page: does it say in plain sentences what you do, for whom and what it costs? An assistant searching on behalf of a client reads exactly that. That is the [agentic economy](https://bombos.ai/en/blog/what-is-the-agentic-economy/) in miniature. Source: [Emerce, Jasper Boot, 12 October 2026](https://www.emerce.nl/opinie/websitebezoeker-nog-wel-echt-mens-mijn-zoektocht-waarheid-achter-onze-cijfers) (in Dutch) ## Will your team soon open Word through Copilot? Microsoft is putting the full Word, Excel and PowerPoint into the new Copilot app. ICT Magazine, a Dutch IT news site: “Microsoft is, as it were, turning the integration between Copilot and its Office programs around.” You ask for a document in the conversation, it opens next to the chat and you finish it there, also with colleagues at the same time. “All Office files are stored in OneDrive.” It starts with users in the early access program. So the place where your team makes a quote or an overview becomes a conversation with an AI assistant. What lies outside Office, such as your accounting software or your client files, does not come up in the story. What [Copilot does and what Bombos does](https://bombos.ai/en/knowledge-base/microsoft-copilot-or-bombos/) is laid out side by side in our knowledge base. Source: [ICT Magazine, Laurens van Aggelen, 12 October 2026](https://www.ictmagazine.nl/nieuws/microsoft-maakt-copilot-de-nieuwe-thuisbasis-voor-office/) (in Dutch) ## What does this mean for your business? The common thread: AI agents increasingly work on the web, for you and for your clients, and an instruction alone is not a limit. At Bombos, that limit sits in the work itself. An AI agent reads what comes into your [shared inbox](https://bombos.ai/en/use-cases/shared-inbox/), finds what belongs with it and prepares the reply. You or your colleague approves and sends, and that approval remains the default. No email is left waiting, and your people do the work that earns money. That one task is the start; after that, your team teaches Bombos the next one itself. ## Sources Every source was opened on 13 October 2026 and every quote appears in it word for word. Quotes from Dutch sources are translated. The quotes from ICT Magazine come from its article; the source behind it, Neowin, could not be opened. [Anthropic on unintended model actions](https://www.anthropic.com/research/investigating-unintended-model-actions) (9 October 2026) · [AP on the false tip in Philadelphia, via News4JAX](https://www.news4jax.com/business/2026/10/10/anthropics-claude-ai-submits-a-false-tip-on-a-philadelphia-unsolved-homicide-case/) (10 October 2026) · [Jasper Boot in Emerce](https://www.emerce.nl/opinie/websitebezoeker-nog-wel-echt-mens-mijn-zoektocht-waarheid-achter-onze-cijfers) (12 October 2026) · [ICT Magazine on Copilot and Office](https://www.ictmagazine.nl/nieuws/microsoft-maakt-copilot-de-nieuwe-thuisbasis-voor-office/) (12 October 2026) ### Curious what Bombos can do for your business? Together we look at which work keeps piling up and set your workers up for exactly that. [Book a call](https://cal.com/piet-baudoin-q9lwaz/15min) [Scan my website](https://bombos.ai/en/scan/)[Leave your details](https://bombos.ai/en/contact/) --- ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"An AI agent was told to stop before submitting, and submitted anyway","description":"An Anthropic AI agent submitted forms it was meant to leave alone. Are your website visitors still people? And Word will soon open inside Copilot.","datePublished":"2026-10-13T00:00:00.000Z","author":{"@type":"Organization","name":"Bombos"},"publisher":{"@type":"Organization","name":"Bombos","logo":{"@type":"ImageObject","url":"https://bombos.ai/assets/bombos-bee.png"}},"mainEntityOfPage":"https://bombos.ai/en/blog/newsletter/2026-10-13/","inLanguage":"en"} ```