Node::replacement is a miscellaneous field that some phases use. Other phases might want some other pointer-sized work in Node, that they can use, instead of Node::replacement. We should rationalize how this works.
Created attachment 206848 [details] the patch
Landed in http://trac.webkit.org/changeset/152828