ACOS v10 ships 5 new safety and intelligence systems. Intelligence score jumps from 72 to 93. Here's what changed and why it matters for AI-native creators.

Understand the 5 new systems in ACOS v10 and how autonomous intelligence works with safety guarantees.
The system that gets smarter every session — with guardrails that prevent it from breaking itself.
ACOS v10 ships five new systems that make the Agentic Creator OS self-improving while keeping it safe. Intelligence score jumped from 72 to 93 out of 100. The key additions: Experience Replay (learning from past successes), Agent IAM (least-privilege access control), Immutable Audit Trail (every action logged), Confidence Circuit Breaker (stops cascading failures), and Conservative Self-Modify Gate (auto-reverts bad config changes). 22 curated skills, 8 specialist agents, 6 IAM-scoped profiles. Hooks optimized from 15 down to 7 for performance. Free on GitHub.
The previous versions of ACOS were capable but fragile in one specific way: they could modify their own configuration without understanding the consequences.
A system that learns from its mistakes is useful. A system that can change its own rules based on what it learns is powerful. But a system that changes its own rules without validating the result is dangerous.
ACOS v9.3 scored 72/100 on our intelligence benchmark. It had solid foundations — executable routing, n-gram patterns, domain classification, quality gates. But it lacked three things:
v10 fixes all three.
Every ACOS session generates a trajectory — a record of what tools were used, in what order, and whether the outcome was successful. By v10, we had 60+ trajectories stored with a 67% average success rate.
Experience Replay does something simple but powerful: when you start a new task, it finds the top 2 most similar past trajectories that succeeded and injects them as context. The system doesn't just know what patterns exist — it remembers how it solved similar problems before.
New task: "Deploy blog post to production"
→ Finds: deployment_traj_1771028043282 (86% success)
→ Finds: deployment_traj_1771038376009 (89% success)
→ Injects both as "here's what worked last time"
The result: fewer repeated mistakes, faster convergence on working solutions.
Before v10, every agent profile had access to every tool and every directory. The music producer could edit .claude/settings.json. The content writer could run arbitrary bash commands. Not ideal.
Agent IAM introduces per-profile scoping:
| Profile | Can Access | Cannot Access |
|---|---|---|
| content-architect | content/, components/, app/ | .claude/, system configs |
| music-producer | content/, public/images/ | Bash tool, .claude/ |
| frontend-designer | app/, components/, lib/ | scripts/, .claude-flow/ |
| technical-architect | Everything | — (full access) |
| devops-engineer | scripts/, .worktrees/, configs | content/ |
| seo-intelligence | content/, lib/seo.ts, data/ | app/, components/ |
This is least-privilege for AI agents. Each profile gets exactly the tools and directories it needs — nothing more.
Every tool use, every gate decision, every IAM violation, every config change gets logged to an append-only JSONL file. The key word is immutable — entries can be added but never deleted or modified.
This serves two purposes:
The audit trail is the foundation for the next two systems.
If an agent fails on a specific file 3 times, it gets a warning. At 5 failures, it gets restricted. At 8 failures, the circuit breaks — no more operations on that file until the session resets or a success occurs.
File: components/Navigation.tsx
Attempt 1: Edit failed (syntax error) → tracked
Attempt 2: Edit failed (wrong context) → tracked
Attempt 3: Edit failed (conflict) → ⚠️ WARN
...
Attempt 8: → 🔴 CIRCUIT BREAK — stop touching this file
This prevents the most common AI failure mode: trying the same broken approach over and over, making things progressively worse.
The most important safety system. When ACOS modifies its own configuration:
This means ACOS can evolve its own rules, but it can never make itself significantly dumber. The system improves monotonically, or it reverts.
| Metric | v9.3 | v10 | Change |
|---|---|---|---|
| Intelligence Score | 72/100 | 93/100 | +29% |
| Hook Events | 15 | 7 | -53% (performance) |
| Skills | 20 rules | 22 curated | Quality over quantity |
| Agent Profiles | 6 | 6 IAM-scoped | Access control added |
| Trajectories Stored | ~30 | 60+ | Experience grows |
| Patterns Extracted | ~25 | 50+ | Learning accelerates |
The hook reduction from 15 to 7 is a performance story. We removed informational-only hooks, consolidated tracking, and eliminated PostToolUseFailure hooks that added overhead without actionable data. Per-tool-use subprocess spawns dropped from 5-6 to 1-2.
ACOS v10 ships with a new real-time status line that shows system state at a glance:
▊ ACOS v10 FrankX │ ⎇ main
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
⬡ Skills 22 │ ◆ Agents 8 │ ◈ Profiles 6 │ ⚡ Hooks 7
◉ Intel 93/100 │ Learn [▪▪▪▫▫] 67% │ ▸ 50 pat │ ▸ 61 traj │ ○ idle
▲ Deploy READY │ ⊕ MCP 6 │ Ctx [░░░░░] 0%
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Every metric is live. Intelligence score, learning progress, trajectory count, pattern count, deployment readiness, MCP server count, context window usage — all visible without running a command.
The journey from v7 to v10 was a journey from capable to autonomous:
The honest version: v7 had inflated numbers and broken hooks. The audit (Feb 13) revealed that "630+ skills" were unvetted npm installs and "158 agents" were empty registrations. v8-v10 rebuilt on truth.
ACOS v10 is the foundation for what comes next:
The goal isn't a system that replaces the creator. It's a system that remembers what worked, avoids what didn't, and gets better every time you use it.
ACOS is open-source and free:
Type /acos and describe what you want. The system handles the rest.
Read on FrankX.AI — AI Architecture, Music & Creator Intelligence
Join 1,000+ creators and architects receiving weekly field notes on AI systems, production patterns, and builder strategy.
No spam. Unsubscribe anytime.