feat(ai): dispatch federated capability broker

Cargo.toml

@@ -38,7 +38,7 @@ futures = "0.3"
 getrandom = "0.3"
 graphql-composition = "=0.12.2"
 graphql-orm = { path = "crates/graphql-orm", version = "0.23.0", default-features = false }
-graphql-orm-ai-tool-profiles = { path = "crates/graphql-orm-ai-tool-profiles", version = "0.7.0" }
+graphql-orm-ai-tool-profiles = { path = "crates/graphql-orm-ai-tool-profiles", version = "0.8.0" }
 graphql-orm-backup = { path = "crates/graphql-orm-backup", version = "0.7.1", default-features = false }
 graphql-orm-operation-catalog = { path = "crates/graphql-orm-operation-catalog", version = "0.3.0" }
 graphql-orm-router-protocol = { path = "crates/graphql-orm-router-protocol", version = "0.2.1" }

crates/graphql-orm-ai-tool-profiles/CHANGELOG.md

@@ -3,13 +3,31 @@ title: "graphql-orm-ai-tool-profiles changelog"
 kind: reference
 status: active
 owner: graphql-orm-ai-maintainers
-last_reviewed: 2026-08-16
+last_reviewed: 2026-08-21
 review_by: 2027-02-11
 supersedes: []
 ---
 
 # Changelog
 
+## [0.8.0] - 2026-08-21
+
+### Added
+
+- `AiCapabilityIndexSet` canonically combines independently compiled logical
+  target indexes for federated discovery. Its deterministic aggregate
+  fingerprint binds each target to its exact index, global search preserves
+  stable ranking, and every capability resolves to one owning index.
+  `AiCapabilityIndexSetLimits` independently bounds targets, aggregate entries
+  and entry bytes, and global search results.
+
+### Security
+
+- Empty sets, duplicate targets, cross-target capability-ID collisions and
+  invalid member fingerprints fail closed. The set invents no aggregate SDL,
+  semantic catalogue or policy identity; execution must revalidate the exact
+  owning index and ordinary resolver authority.
+
 ## [0.7.0] - 2026-08-21
 
 ### Added

crates/graphql-orm-ai-tool-profiles/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "graphql-orm-ai-tool-profiles"
-version = "0.7.0"
+version = "0.8.0"
 edition = "2024"
 authors = ["Toby Martin <toby@dastari.net>"]
 description = "Backend-neutral GraphQL AI tool profile compiler and manifest contracts"

crates/graphql-orm-ai-tool-profiles/MIGRATION.md

@@ -3,13 +3,34 @@ title: "graphql-orm-ai-tool-profiles migration guide"
 kind: reference
 status: active
 owner: graphql-orm-ai-maintainers
-last_reviewed: 2026-08-16
+last_reviewed: 2026-08-21
 review_by: 2027-02-11
 supersedes: []
 ---
 
 # Migration Guide
 
+## 0.7.0 to 0.8.0: canonical federated capability-index sets
+
+Adopt `graphql-orm-ai-tool-profiles` 0.8.0 and `graphql-orm-ai` 0.85.0 from one
+reviewed full monorepo revision. Continue compiling one exact
+`AiCapabilityIndex` beside each owning target after its finished SDL and
+semantic catalogue are complete. Combine the active indexes with
+`AiCapabilityIndexSet::compile` and use its fingerprint for delivery surfaces
+and retained provider-session bindings.
+
+Remove consumer-authored combined-index fingerprints and single-target broker
+selection. Capability IDs must be globally unique across the active set; a
+collision is now a deployment error. Discovery ranks the complete set, while
+loading and execution revalidate the exact member index's target, schema,
+semantic catalogue and policy fingerprints. Existing single-index sources can
+continue through the compatibility adapter. Validate deployment-specific
+`AiCapabilityIndexSetLimits` for target count, aggregate entry count, canonical
+entry bytes and global search results when the defaults are not appropriate.
+
+No database, data, GraphQL SDL, table, column, index, constraint, backfill,
+protected-content, credential or AI schema-module migration is required.
+
 ## 0.6.0 to 0.7.0: proof-bearing pre-transport budget denial
 
 Adopt `graphql-orm-ai-tool-profiles` 0.7.0 with `graphql-orm-ai` 0.84.0 from

crates/graphql-orm-ai-tool-profiles/README.md

@@ -24,7 +24,7 @@ are separate runtime decisions and must remain default-deny.
 
 ```toml
 [dependencies]
-graphql-orm-ai-tool-profiles = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.7.0" }
+graphql-orm-ai-tool-profiles = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.8.0" }
 serde_json = "1"
 ```