The frozen section is the load-bearing one
Everything a consumer depends on goes in Frozen, and a test asserts each entry is unchanged. That test is the release; the changelog is a description of it.
Where the plan lives
In the repo, one file per release, named by version. A release that has no plan file is a release nobody can explain later, which is the cheapest kind of release to regret.