the verifier shouldn't modify the IR.