Add ??? as function-scope holes, convert them to oracles
Fix IfSplit