From cc977b9e582e041d8df798eab21dd8b69cc2cf1c Mon Sep 17 00:00:00 2001
From: Sameh Khamis <sameh@halfpixel.ai>
Date: Fri, 16 Oct 2026 16:39:13 -0700
Subject: [PATCH] Move the changelog entry into changelog.d

Main now takes release notes as one fragment per pull request (#787).
---
 changelog.d/973-tomtom-cross-site-gate.md | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 changelog.d/973-tomtom-cross-site-gate.md

diff --git a/changelog.d/973-tomtom-cross-site-gate.md b/changelog.d/973-tomtom-cross-site-gate.md
new file mode 100644
index 000000000..e4a029406
--- /dev/null
+++ b/changelog.d/973-tomtom-cross-site-gate.md
@@ -0,0 +1,4 @@
+- Cross-site browser requests can no longer spend the TomTom traffic-tile
+  budget through `/api/tomtom/*`. The shared same-site gate runs before status,
+  cache, and upstream work; same-origin app requests and non-browser local
+  callers remain supported (Sunil56224972, #973).