I think the easy way to "slow roll" would be like this.
Tumbleweed - would stay the same.
Leap would be "last weeks stable Tumbleweed" except for kernel
CVE's they would go out ASAP. Any Bugzilla confirms would go into
a grep -v list to be done in to prevent them from updating.
The updating to Leap could be done with a find, grep -v from bugzilla confirms, and cp from the Tumbleweed repos to the Leap repos.
Tumbleweed is great for "geek" users - Leap for non-geeks that never can figure out how to fix any problem. - I know - I support a lot of them all over America.
No need for Leap separate compiles. Leap becomes very stable.
My 2 cents.