What you describe seems to be very close to phases in Mercurial. There, the repository keeps track of whether commits were pushed to other repositories. And you

What you describe seems to be very close to phases in Mercurial. There, the repository keeps track of whether commits were pushed to other repositories. And you can mark commits as secret, which will stop them from getting pushed out: https://www.mercurial-scm.org/wiki/Phases https://www.mercurial-scm.org/wiki/Phases