@@ -4,6 +4,20 @@ All notable changes to CallShield will be documented in this file.
 
 ## Unreleased
 
+- Numbers that other CallShield users reported, but that haven't been
+  confirmed enough to block, now get a label. When two people report the
+  same number on the same day and nobody marks it as not spam, the caller ID
+  popup and the after-call notification read "Reported by 2 CallShield
+  users, not confirmed". The label never blocks a call by itself, even in
+  aggressive mode. The list is a new signed feed that updates with the
+  trending numbers, and a not-spam report takes a number off it at the next
+  merge.
+- The report service's overall limit of 30 reports a minute now holds for
+  the whole service. It used to be counted separately in each Cloudflare
+  location. A report the service can't take no longer uses up your own
+  allowance, and addresses in one IPv4 /24 now share a budget the way one
+  IPv6 /48 already did.
+
 ## v1.11.0 (2026-09-30)
 
 - A link written `https://evil.com\@paypal.com` in a text is now checked as