even though the commit isn't on any branch, you can still see it's tagged by the repository. This gives pretty strong assurance that it wasn't a commit that the author was "framed" for.